8 matches found
PT-2013-4723 · Microsoft · Skype For Business +1
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 11 Description: A use-after-free vulnerability exists in the SetMouseCapture implementation in mshtml.dll. This allows remote attackers to execute arbitrary code via crafted JavaScript strings,...
PT-2012-1250 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 8 Description: The issue is related to a use-after-free vulnerability in the CDwnBindInfo function of the mshtml.dll library in Internet Explorer. This vulnerability allows a remote attacker to...
Microsoft MS09-0 0 2 vulnerability analysis report-vulnerability warning-the black bar safety net
Rising anti-virus researcher leaves ultra Internet Explorer CFunctionPointer function does not correctly handle a document object, if in a specific sequence attach and delete object, you can trigger the memory destruction. An attacker can construct a special sequence of code to trigger this memor...
VulnCheck KEV: CVE-2008-4844
Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving 1 an XML Island, 2 XML DSOs, or 3 Tabular Data Control TDC in...
Buffer overflow in mshtml.dll
Stack overflow on long filename or extension in EMBED tag...
Microsoft Internet Explorer 4 / Outlook 2000/5.5 - 'MSHTML.dll' Crash
source: https://www.securityfocus.com/bid/2202/info MSHTML.DLL is the shared library for parsing HTML in Internet Explorer and related applications. It may be possible for an attacker to crash this library remotely and cause a denial of service with special Jscript code. This bug involves Jscript...
CVE-1999-0489
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013...
CVE-1999-0489
MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in MS:MS98-013...