5850 matches found
Microsoft Internet Explorer does not adequately evaluate malformed URLs
Overview Microsoft Internet Explorer contains a serious vulnerability in its handling of zone determination. Description Microsoft Internet Explorer contains a vulnerability in the way in which it handles zone determination. Specifically, HTML scripts stored in cookies should be executed in the...
CVE-2002-0136
Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...
CVE-2001-1219
Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service client crash via JavaScript that continually refreshes the window via self.location...
CVE-2002-0136
Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...
CVE-2002-0136: Undefined Security Weakness
Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...
CVE-2001-1218: Undefined Security Weakness
Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service crash in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window...
CVE-2002-0101: Undefined Security Weakness
Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released...
CVE-2001-1219: Undefined Security Weakness
Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service client crash via JavaScript that continually refreshes the window via self.location...
CVE-2000-0790: Undefined Security Weakness
The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the Folder.htt file and using the InvokeVerb method in the ShellDefView ActiveX control to specify a default execute option for the first file...
Выполнение приложений через Microsoft Internet Explorer для Macintosh (code execution)
Можно выполнить служебный системный скрипт через META REFRESH. Или через файл с образом диска...
Buffer Overflow in Microsoft Internet Explorer
Internet Security Systems Alert February 25, 2002 Buffer Overflow in Microsoft Internet Explorer Synopsis: ISS X-Force has learned of a buffer overflow vulnerability in Microsoft Internet Explorer versions 5.5 and 6.0. This vulnerability may be exploited by delivering specially-crafted HTML code ...
Advisory CA-2002-04 Buffer Overflow in Microsoft Internet Explorer
CERT Advisory CA-2002-04 Buffer Overflow in Microsoft Internet Explorer Original release date: February 25, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Microsoft Internet Explorer Microsoft Outlook and Outlook Express...
Microsoft Internet Explorer HTML rendering engine contains buffer overflow processing SRC attribute of HTML <EMBED> directive
Overview The Microsoft Internet Explorer HTML rendering engine contains a vulnerability in its handling of the SRC attribute of the HTML directive. An attacker who is able to convince a user to read a malicious HTML file may be able to crash Internt Explorer or execute arbitrary code with the...
buffer overflow in mshtml.dll
Topic: buffer overflow in mshtml.dll Authors: ERRor and DarkZorro of domain Hell 3APA3A of SECURITY.NNOV Date: February, 13 2002 Vendor Informed: December, 20 2001 Software affected: Microsoft Internet Explorer 6.0 and prior Microsoft Outlook Express 6.0 and prior Microsoft Outlook 2000 and prior...
dH & SECURITY.NNOV: buffer overflow in mshtml.dll
Topic: buffer overflow in mshtml.dll Authors: ERRor and DarkZorro of domain Hell 3APA3A of SECURITY.NNOV Date: February, 13 2002 Vendor Informed: December, 20 2001 Software affected: Microsoft Internet Explorer 6.0 and prior Microsoft Outlook Express 6.0 and prior Microsoft Outlook 2000 and prior...
Adobe PhotoDeluxe does not adequately restrict Java execution
Overview A vulnerability exists in Adobe PhotoDeluxe that allows a malicious web page or HTML email message viewed with Microsoft Internet Explorer to obtain directory listings or potentially download and execute arbitrary code on the local system. Description Adobe PhotoDeluxe is an image...
CVE-2002-0077
Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable...
Microsoft Internet Explorer 5 - JavaScript Local File Enumeration (2)
Microsoft Internet Explorer 5 - JavaScript Local File Enumeration 2 source: https://www.securityfocus.com/bid/3779/info Microsoft Internet Explorer is prone to a vulnerability which may disclose sensitive information to a malicious webmaster. When script code includes a file outside of the docume...
Microsoft Internet Explorer 56 - GetObject File Disclosure
Microsoft Internet Explorer 56 - GetObject File Disclosure source: https://www.securityfocus.com/bid/3767/info A flaw exists in Microsoft Internet Explorer that may allow a remote attacker to view known files on a target system when a user views web content containing a specially crafted script...