CVE-2007-1765

A stack buffer overflow vulnerability exists in the LoadAniIcon() function of USER32.dll within Microsoft Windows (including 2000 SP4, XP SP2, and XP 64-Bit Edition). A remote attacker can trigger memory corruption by providing a malformed .ANI file, which can be used to execute arbitrary code or...

CVE-2004-0212

CVE-2004-0212 describes a stack-based buffer overflow in the Windows Task Scheduler (mstask) that affects Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0. The vulnerability occurs in how Task Scheduler handles long parameters in .job files, allowing a remote or local attacker to ex...

CVE-2004-1050

A heap-based buffer overflow exists in Internet Explorer 6 when parsing certain parameters of an IFRAME tag, specifically the NAME attribute. This vulnerability allows remote attackers to execute arbitrary code or create a denial of service condition in the context of the currently logged-in user...

CVE-2004-0201

The CVE-2004-0201 entry documents a heap-based buffer overflow in the HTML Help viewer hh.exe used by HTML Help (.chm) on Windows platforms (Windows 98, Me, NT 4.0, 2000, XP, and Server 2003). The vulnerability allows remote code execution via a .CHM file with a large length field, enabling an at...

CVE-2004-0842

The CVE-2004-0842 issue affects Internet Explorer 6.0 SP1 and earlier (Windows platforms) and is caused by an unchecked buffer in CSS parsing that can trigger heap memory corruption via crafted CSS (for example, the “@;/*”” sequence). Successful exploitation could lead to remote code execution or...

CVE-2004-0841

Internet Explorer 6.x is vulnerable to a privilege elevation vulnerability, known as HijackClick 3 or the Script in Image Tag File Download Vulnerability . A remote attacker can exploit this by constructing a malicious web page that uses mousedown events to call the Popup.show method, combined wi...

CVE-2004-0839

CVE-2004-0839 is the IE Drag-and-Drop Vulnerability. The connected docs show it as a publicly disclosed CAN-2005-0053 vulnerability, which was addressed by Microsoft security updates MS05-014 and related MS05-008. The vulnerability arises from Internet Explorer handling drag-and-drop events, allo...

CVE-2004-0215

CVE-2004-0215 describes a denial-of-service vulnerability in Microsoft Outlook Express 5.5 SP2 and Outlook Express 6 (including SP1 and 64‑bit/Windows Server 2003 variants) where a specially crafted or malformed e-mail header could crash the application. The issue is documented in MS04-018 (CAN-2...

CVE-2004-0205

The CVE-2004-0205 entry corresponds to a buffer overrun in the IIS 4.0 redirect function that could allow remote code execution on affected systems. Concrete details in the connected MS04-021 bulletin indicate IIS 4.0 (Windows NT 4.0 with SP6a) is affected, while IIS 5.x/6.x are not. The vulnerab...