Design/Logic Flaw

Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service failure of subsequent image rendering via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function...

CVE-2008-4127

CVE-2008-4127 affects Microsoft Internet Explorer (IE) on Windows XP SP2, specifically IE 7 Gold (7.0.5730) and IE 8 Beta (8.0.6001). The vulnerability arises from processing a crafted PNG file, leading to a denial of service via an infinite loop in the CDwnTaskExec::ThreadExec function, causing ...

CVE-2008-4127

Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service failure of subsequent image rendering via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function...

MS Internet Explorer (blnmgr.dll) COM Object Remote Exploit (MS05-038)

No description provided by source. !-- placed into html for your testing. /str0ke !/usr/bin/perl Internet Explorer COM Objects Instantiation Proof of Concept Exploit MS05-038 Bindshell on port 28876 - Based and ripped from Berend-Jan Wever's IE Exploit Vulnerable Objects :...

Microsoft Internet Explorer setExpression远程代码漏洞

CVE ID:CVE-2007-3902 CNCVE ID:CNCVE-20073902 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理CRecalcProperty函数存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于mshtml.dll的CRecalcProperty函数中，当在调用setExpressio方法后渲染HTML，之后跟随编程化建立元素的outerHTML属性的修改，有问题代码会引用之前释放的内存地址而导致代码执行。 Microsoft...

ZDI-07-073: Microsoft Internet Explorer setExpression Vulnerability

ZDI-07-073: Microsoft Internet Explorer setExpression Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-073.html December 11, 2007 -- CVE ID: CVE-2007-3902 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 5.01 SP4 Internet Explorer 6 Internet...

CVE-2007-3902

Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialize...

CVE-2007-3902

CVE-2007-3902 is a use-after-free/ memory corruption vulnerability in Microsoft Internet Explorer 5.01–7, caused by the CRecalcProperty function in mshtml.dll. Attackers could trigger arbitrary code execution by calling the setExpression method and then modifying an element’s outerHTML, leading t...

Microsoft Internet Explorer setExpression Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the CRecalcProperty function in...

CVE-2007-4901

The embedded Internet Explorer server control in AOL Instant Messenger AIM 6.1.41.2 and 6.2.32.1, AIM Pro, and AIM Lite does not properly constrain the use of mshtml.dll's web script and HTML functionality for incoming instant messages, which allows remote attackers to place HTML into unexpected...

CVE-2006-7065

Microsoft Internet Explorer allows remote attackers to cause a denial of service crash via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference...

CVE-2006-7065

Microsoft Internet Explorer allows remote attackers to cause a denial of service crash via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference...

CVE-2006-7065

CVE-2006-7065 affects Microsoft Internet Explorer (mshtml.dll). A crafted IFRAME referencing a particular XML file and XSL stylesheet can trigger a crash in mshtml.dll when a refresh occurs, described as probably a null pointer dereference. The issue is documented across Red Hat and NVD/CVE sourc...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

CVE-2006-7030

Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service crash via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in mshtml.dll...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

CVE-2006-7030

The CVE-2006-7030 entry concerns Microsoft Internet Explorer 6 SP2 and earlier. It describes a vulnerability where remote attackers can cause a denial of service (crash) by delivering certain malformed HTML, potentially involving applet and base tags without required arguments, which triggers a n...

Microsoft IE mshtml.dll畸形HTML空指针引用漏洞

Internet Explorer是微软发表的非常流行的WEB浏览器。 Internet Explorer的mshtml.dll库没有正确的处理畸形的HTML页面，远程攻击者可能利用此漏洞导致用户IE浏览器崩溃。 如果用户受骗打开了恶意页面的话，就可能出现空指针引用，导致浏览器崩溃。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 AmesianX （[email protected]） http://www.milw0rm.com/exploits/3272...

Microsoft Internet Explorer多个ActiveX控件拒绝服务漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer包含的多个ActiveX控件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Determina Security Research发现当部分对象属性通过JavaScript访问时，多个控件会由于非法内存访问异常而导致应用程序崩溃。多数受影响ActiveX控件存在于MSHTML.dll中，这些ProgIDs包括如下： giffile htmlfile jpegfile mhtmlfile ODCfile pjpegfile pngfile...

QQ漏洞（远程可执行）Tencent QQ VQQPlayer.ocx

No description provided by source. ---------------------------------------------------------------------------------------- / ----------------------------------------------------------------------- Tencent QQ VQQPlayer.ocx all version 0day Author: axis Date: 2006-12-27 Mail: [email protected]...