5850 matches found
CVE-2005-2308
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using 1 movfencepost.jpg, 2 cmpfencepost.jpg, 3 oomdos.jpg, or 4 random.jpg...
CVE-2005-2308: Undefined Security Weakness
The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using 1 movfencepost.jpg, 2 cmpfencepost.jpg, 3 oomdos.jpg, or 4 random.jpg...
CVE-2004-2219: Undefined Security Weakness
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake...
Compromising pictures of Microsoft Internet Explorer!
Synopsis: --------- Well, not really. Instead, at the risk of boring you to death, I'd like to report on a casual 30-minute experiment I've conducted of recent. This experiment resulted in identifying a potential remote code execution path in Microsoft Internet Explorer, plus some other bugs, and...
Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering CMP Fencepost Denial of Service
Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering CMP Fencepost Denial of Service source: https://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue...
Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering CMP Fencepost Denial of Service
source: https://www.securityfocus.com/bid/14284/info Microsoft Internet Explorer is prone to an unspecified denial of service vulnerability in the JPEG image rendering library used by the browser. This issue is reportedly similar to the one described in BID 14282. This issue was identified by...
Microsoft Internet Explorer 5.0.1 - '.JPEG' Image Rendering Buffer Overflow
source: https://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the application to properly bounds check input data prior to copying it to a fixe...
Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering Buffer Overflow
Microsoft Internet Explorer 5.0.1 - .JPEG Image Rendering Buffer Overflow source: https://www.securityfocus.com/bid/14282/info Microsoft Internet Explorer is prone to a buffer overflow vulnerability in the JPEG image rendering library used by the browser. This issue is due to a failure of the...
Microsoft Internet Explorer buffer overflow
Buffer overflow while parsing document with embedded non-ActiveX object elements...
CVE-2005-2274: Undefined Security Weakness
Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."...
Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow
Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx...
MS Internet Explorer (javaprxy.dll) COM Object Remote Exploit
Exploit for unknown platform in category remote exploits ============================================================= MS Internet Explorer javaprxy.dll COM Object Remote Exploit ============================================================= Bindshell on port 28876 - Based on Berend-Jan Wever's IE...
Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow
Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx sec-consult - http://www.sec-consult.com/184.html Solution : Set Internet and...
Microsoft Internet Explorer Javaprxy.DLL COM Object Instantiation Heap Overflow Vulnerability
Description Microsoft Internet Explorer is prone to a heap-based buffer-overflow vulnerability that occurs when the 'javaprxy.dll' COM object is instantiated by a malicious webpage. Attackers may exploit this issue to execute arbitrary code in the context of the client. Technologies Affected...
CVE-2002-1984
Microsoft Internet Explorer 5.0.1–6.0 on Windows 2000/XP is vulnerable to a denial of service via a crafted OBJECT tag with CLSID:00022613-0000-0000-C000-000000000046. The issue, described across multiple sources (NVD, Red Hat, CVE records), places the root cause in how the CLSID is processed wit...
CVE-2002-1984: Undefined Security Weakness
Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service crash via an OBJECT tag that contains a crafted CLASSID CLSID value of "CLSID:00022613-0000-0000-C000-000000000046"...
CVE-2002-1824: Undefined Security Weakness
Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear...
CVE-2001-1489
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service CPU consumption and memory leak via a web page with a large number of images...
CVE-2002-1688
This CVE concerns Microsoft Internet Explorer versions 5.5–6.0, where the browser history feature can be abused to execute arbitrary JavaScript in the context of a user session. An attacker can inject JavaScript into the URL, which is executed when the user clicks Back, allowing remote script exe...