CVE-2006-1185: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption...

CVE-2006-1190: Undefined Security Weakness

Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to execute arbitrary code...

CVE-2006-1191: Undefined Security Weakness

Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site...

Microsoft Internet Explorer Persistent Window Content Address Bar Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to address-bar spoofing. Attackers may exploit this via a malicious web page to spoof the contents of a page that the victim may trust. This vulnerability may be useful in phishing or other attacks that rely on content spoofing. Technologies Affect...

Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue results from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...

CVE-2006-1186: Undefined Security Weakness

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the 1 Mdt2gddr.dll, 2 Mdt2dd.dll, and 3 Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption...

CVE-2006-1188: Undefined Security Weakness

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption...

CVE-2006-1189: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name IDN using double-byte character sets DBCS, aka the "Double Byte Character Parsing Memory Corruption Vulnerability."...

Code injection

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

CVE-2006-1388

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

CVE-2006-1388

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

CVE-2006-1388: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

MS Internet Explorer (createTextRang) Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits =================================================================== MS Internet Explorer createTextRang Remote Code Execution Exploit =================================================================== !--...

CVE-2006-1359: Improper Control of Generation of Code

Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer...

Microsoft Internet Explorer - 'createTextRang' Remote Code Execution

shellcode = unescape "%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%...

[Full-disclosure] Microsoft Internet Explorer (mshtml.dll) - Remote Code Execution

Computer Terrorism UK :: Incident Response Centre Security Advisory :: CT22-03-2006 ------------------------------------------- Title: Microsoft Internet Explorer mshtml.dll - Remote Code Execution Organisation: Computer Terrorism UK Web: www.computerterrorism.com Advisory Date: 22nd March, 2006...

[SA18680] Microsoft Internet Explorer "createTextRange()" Code Execution

TITLE: Microsoft Internet Explorer "createTextRange" Code Execution SECUNIA ADVISORY ID: SA18680 VERIFY ADVISORY: http://secunia.com/advisories/18680/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Microsoft Internet Explorer 6.x http://secunia.com/product/11/...

Microsoft Internet Explorer 6 - 'mshtml.dll checkbox' Crash

r=document.getElementById"c"; a=r.createTextRange; milw0rm.com 2006-03-22...

Microsoft Internet Explorer 6 - Script Action Handlers mshtml.dll Denial of Service

Microsoft Internet Explorer 6 - Script Action Handlers mshtml.dll Denial of Service foo onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork...

Microsoft Internet Explorer 6 - Script Action Handlers 'mshtml.dll' Denial of Service

foo onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork...