CVE-2005-1988

The CVE-2005-1988 entry describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.0, 5.5, and 6.0) caused by memory corruption in the JPEG image rendering component. A crafted JPEG image (delivered via a malicious webpage or HTML email) could trigger a buffer over...

CVE-2006-2900

CVE-2006-2900 concerns Internet Explorer 6 and an information-disclosure issue where a user-assisted attacker could cause file content disclosure by manipulating focus via OnKeyDown/OnKeyPress/OnKeyUp events and inserting characters into a file upload control. The core vector is a keystroke hijac...

CVE-2009-2576

CVE-2009-2576 refers to a Denial of Service in Microsoft Internet Explorer (IE) where a long Unicode string passed to the write method can consume CPU/memory. The OpenVAS entry OpenVAS:900400 explicitly links CVE-2009-2576 to IE Unicode String DoS and lists a base CVSS v2 score of 5.0 (AV:N/AC:L/...

CVE-2005-1990

CVE-2005-1990 affects Internet Explorer 5.0, 5.5, and 6.0. The vulnerability arises from improper instantiation of certain COM objects as ActiveX controls, causing a buffer/memory corruption in the host process and potentially enabling command execution or a crash. Affected components include a s...

CVE-2004-0843

CVE-2004-0843 is a Plug-in Navigation Address Bar Spoofing vulnerability in Internet Explorer (IE 5.01/5.5/6 families). A remote attacker could cause the address bar to show a URL different from the loaded page via plug‑ins, enabling phishing-like deception. The connected OpenVAS entries confirm ...

CVE-2005-0056

CVE-2005-0056 affects Internet Explorer (Windows 2000/XP/Server 2003) via a cross-domain vulnerability in Channel Definition Format (CDF) file URL validation. A malicious web page could trigger information disclosure or remote code execution by exploiting the IE cross-domain security model, poten...

CVE-2008-1085

CVE-2008-1085 is corroborated by connected docs as a remote code execution risk in Internet Explorer across multiple versions and Windows releases, addressed by MS08-024 (Cumulative Security Update for IE). The MSKB KB947864 summary notes that this update resolves vulnerabilities that could allow...

CVE-2006-4560

CVE-2006-4560 affects Internet Explorer 6 on Windows XP SP2. The flaw enables remote attackers to make the browser drop DNS pinning and perform a new DNS query for a domain controlled by the attacker, by hosting script on an Internet server that an intranet server can be made inaccessible to and ...

CVE-2005-1989

CVE-2005-1989 is part of a set of Internet Explorer flaws affecting IE 5.0/5.5/6.0 via Web Folder Behaviors Cross‑Domain Vulnerability (CAN-2005-1989) and related issues (CAN-2005-1988 JPEG Rendering; CAN-2005-1990 COM Object Instantiation). The connected records confirm a cross‑domain informatio...

CVE-2006-1192

CVE-2006-1192 refers to an Address Bar Spoofing vulnerability in Internet Explorer 5.01–6 where phishing could be facilitated by persisting window content and trust UI after navigation, allowing a malicious page to display a legitimate URL while loading content from another site. The Connected do...

CVE-2006-5577

CVE-2006-5577 affects Microsoft Internet Explorer 6 and earlier, enabling information disclosure of the TIF (Temporary Internet Files) folder path when certain uses of the OBJECT tag occur. Connected sources confirm this is part of a family of TIF-folder vulnerabilities (CVE-2006-5577, -5578) tie...

CVE-2004-0869

CVE-2004-0869 describes a vulnerability in Internet Explorer where cookies set over HTTP can be sent to the same domain over HTTPS/SSL, enabling a cookie to leak across security boundaries and potentially allow session hijacking. The cross security boundary cookie injection could occur even when ...

CVE-2006-1185

CVE-2006-1185 is an HTML Parsing vulnerability in Microsoft Internet Explorer 5.01 through 6 that can allow remote code execution via specially crafted HTML causing memory corruption. The connected MS06-013 documentation confirms this as a remote code execution flaw and describes that Microsoft r...

CVE-2006-1188

CVE-2006-1188 is a memory corruption vulnerability in Microsoft Internet Explorer 6 (IE6) when handling HTML elements with a specially crafted tag, enabling remote code execution. Exploitation targets IE6 SP2 on Windows platforms (notably XP SP2/Win2K SP4 variants). The issue is addressed by Micr...

CVE-2005-0054

CVE-2005-0054 is a remote-code-execution vulnerability in Internet Explorer 5.01/5.5/6 where specially crafted HTML/URLs cause IE to interpret a page in the wrong security zone, potentially executing code in the Local Machine zone. The issue stems from how encoded hostnames are parsed for URLs, e...

CVE-2006-0753

CVE-2006-0753 is a memory leak/DoS issue in Microsoft Internet Explorer 6 on Windows XP SP2 caused by JavaScript using setInterval to repeatedly set window.status, leading to stack exhaustion in the Script Engine. Connected advisory CPAI-2006-160 confirms a stack-exhaustion path and DoS outcome. ...

CVE-2006-5884

CVE-2006-4777 corresponds to a DirectAnimation ActiveX vulnerability (Daxctle.ocx, KeyFrame method) in Internet Explorer 5.01–6 that enables memory corruption/heap overflow, with exploits referenced by Metasploit module ms06_067_keyframe and multiple sightings (CIRCL, exploit-db). Public material...

CVE-2005-2087

CVE-2005-2087 affects Internet Explorer on Windows, via the JView Profiler (Javaprxy.dll) COM object. The vulnerability is a heap overflow when the COM object is instantiated from a crafted web page, potentially allowing arbitrary code execution or a crash in the user’s context. Exploitation requ...

CVE-2006-3643

CVE-2006-3643 describes a remote code execution vulnerability in Microsoft Management Console (MMC) exposed via HTML in the MMC library. It affects Windows 2000 SP4 (and related MMC/IE configurations) where HTML-embedded MMC resources can be accessed from the Internet/Intranet zones, allowing rem...

CVE-2001-1489

The provided records identify CVE-2001-1489 as an issue in Microsoft Internet Explorer 6 where processing a web page containing a large number of images can lead to a denial of service through CPU consumption and memory leaks. The vulnerability is described consistently across sources (NVD/CVE en...

CVE-2003-1041

CVE-2003-1041 is a showHelp/HTML Help vulnerability in Internet Explorer 5.x/6.0 where a remote attacker could run arbitrary code via a crafted showHelp URL or a malicious HTML Help link. The underlying issue is improper validation/processing of CHM files, enabling remote code execution in the Lo...

CVE-2006-3354

Microsoft Internet Explorer 6 is affected by CVE-2006-3354. A vulnerability in the ADODB.Recordset ActiveX object’s Filter property can cause a denial of service (crash) when values are set multiple times, triggering a null dereference. Affected: IE6; vulnerable component: ADODB.Recordset ActiveX...

CVE-2006-7065

CVE-2006-7065 affects Microsoft Internet Explorer (mshtml.dll). A crafted IFRAME referencing a particular XML file and XSL stylesheet can trigger a crash in mshtml.dll when a refresh occurs, described as probably a null pointer dereference. The issue is documented across Red Hat and NVD/CVE sourc...

CVE-2004-0844

CVE-2004-0844 describes an address bar spoofing vulnerability in Internet Explorer 6 on Double Byte Character Set (DBCS) locales. A canonicalization error in how IE parses certain characters in an HTTP URL could cause the address bar to display a different URL from the actual loaded page, enablin...

CVE-2008-0078

CVE-2008-0078 describes a remote-code-execution vulnerability in Internet Explorer caused by an Argument Handling Memory Corruption in the ActiveX control dxtmsft.dll (IE 5.01, 6 SP1/SP2, 7). A crafted image on a malicious webpage could allow an attacker to execute arbitrary code with the privile...

CVE-2004-0216

CVE-2004-0216 is an Install Engine vulnerability in Internet Explorer (inseng.dll) affecting IE 5.01, 5.5, and 6. It enables remote code execution when a user opens a malicious website or HTML email containing a long CAB file name, triggering an integer/buffer length overflow in the Install Engin...

CVE-2006-0057

CVE-2006-0057 describes a vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6 where remote attackers can bypass the Kill Bit protection for dangerous ActiveX controls through crafted HTML, exposing the browser to previously mitigated risks. The issue is tied to a failure in enforcing th...

CVE-2006-3944

Microsoft Internet Explorer 6 on Windows XP SP2 is affected by CVE-2006-3944. The vulnerability concerns the Forms.ListBox.1 object, where the ListWidth property set to 0x7fffffff can trigger an integer overflow, and set to 0x7ffffffe can cause a null dereference, leading to a denial of service (...

CVE-2006-1719

The CVE-2006-1719 entry concerns Internet Explorer 6. Affected software : Internet Explorer 6. Vulnerability : a flaw in handling any scrollbar CSS property can be exploited to trigger a remote denial of service (application crash). Impact : denial of service on the affected client. Root cause : ...

CVE-2006-3659

Microsoft Internet Explorer 6 is affected by CVE-2006-3659. The vulnerability enables remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object. The public description across sources consistently states this is a crash/DoS vector i...

CVE-2006-1186

CVE-2006-1186 is a remote-code-execution vulnerability in Microsoft Internet Explorer 5.01–6 caused by instantiating certain COM objects (Mdt2gddr.dll, Mdt2dd.dll, Mdt2gddo.dll) as ActiveX controls, leading to memory corruption. Connected MS docs describe that the issue is addressed by the MS06-0...

CVE-2006-3657

Microsoft Internet Explorer 6 contains a vulnerability in the DXImageTransform.Microsoft.Gradient ActiveX object. A long StartColorStr or EndColorStr property can trigger a remote denial of service via a stack overflow. Affected: IE6; vulnerability impact is to crash/partial availability. The doc...

CVE-2008-0076

Summary of CVE-2008-0076 (HTML Rendering Memory Corruption in Internet Explorer) : A remote code execution vulnerability in Microsoft Internet Explorer versions 5.01, 6 SP1/SP2, and 7 due to how IE renders HTML with certain layout combinations. An attacker could craft a page that, when viewed, ex...

CVE-2005-4827

CVE-2005-4827 affects Internet Explorer 6.0 (and possibly other versions). It describes a bypass of the same-origin policy by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) with a method name containing tab, newline, or carriage return characters, a pattern some proxies convert to s...

CVE-2006-3637

CVE-2006-3637 is an Internet Explorer remote code execution vulnerability in the HTML rendering path where certain layout combinations can corrupt memory. A crafted HTML file/page could allow a user-assisted remote attacker to execute arbitrary code with the caller’s privileges. Affected products...

CVE-2006-5578

CVE-2006-5578 affects Microsoft Internet Explorer 6 and earlier. It is a TIF folder information disclosure vulnerability exploited via drag-and-drop operations, allowing remote attackers to read files from the Temporary Internet Files (TIF) folder. Microsoft released MS06-072 (Cumulative Security...

CVE-2001-0665

Affected product: Internet Explorer 6 and earlier. Vulnerability: HTTP Request Encoding allows remote attackers to trigger what look like user-originated HTTP requests, potentially enabling privilege escalation or execution of operations in web-based services. Root cause: encoding flaw in HTTP re...

CVE-2006-3639

CVE-2006-3639 describes an information disclosure and remote code execution vulnerability in Microsoft Internet Explorer (IE) 5.01 and IE6 related to how a source element is handled during redirects across domains. Exploitation could allow an attacker to read data from a Web page in another IE do...

CVE-2005-4679

This CVE affects Internet Explorer 6 for Windows XP SP2 . The vulnerability allows remote attackers to spoof the URL in the status bar by abusing the title attribute of an image linked to a trusted site within a form, leading to potential user deception. The description does not specify affected ...

CVE-2006-3451

CVE-2006-3451 is a remote code execution vulnerability in Microsoft Internet Explorer 5 SP4 and 6 caused by how chained CSS imports are handled during garbage collection, which can corrupt memory when a user views a crafted page. Exploitation could allow arbitrary code execution on an affected Wi...

CVE-2006-3943

The CVE-2006-3943 entry describes a stack-based buffer overflow in NDFXArtEffects of Internet Explorer 6 on Windows XP SP2, exploitable via long RGBExtraColor, RGBForeColor, and RGBBackColor properties to cause a denial of service (crash). Affected product: Microsoft Internet Explorer 6 on Window...

CVE-2006-3658

Microsoft Internet Explorer 6 is affected by CVE-2006-3658. The flaw occurs when accessing the object references of a FolderItem ActiveX object, triggering a null dereference in the security check and enabling a remote attacker to cause a denial of service (crash). The connected sources do not pr...

CVE-2006-4687

CVE-2006-4687 describes a remote code execution vulnerability in Microsoft Internet Explorer (versions 5.01–6) triggered by crafted HTML layout using DIV tags and CSS float properties, causing memory corruption. Several connected sources (ZDI-06-041, CERT/NVD, and the MS06-067 bulletin) corrobora...

CVE-2006-4888

CVE-2006-4888 affects Microsoft Internet Explorer 6 and earlier. The issue is a DoS vulnerability where a CSS-formatted HTML INPUT element inside a DIV larger than the INPUT can cause an application hang. Connected sources (Red Hat, NVD, CVE listings) confirm the same description. No concrete rem...

CVE-2004-0479

The vulnerability CVE-2004-0479 affects Internet Explorer 6. JavaScript that creates a new popup window and disables the imagetoolbar via a META tag can trigger a null dereference, leading to a remote denial of service (crash). The description does not provide exploit status or concrete remediati...

CVE-2004-0845

CVE-2004-0845 concerns Internet Explorer (IE) versions 5.01, 5.5, and 6. The vulnerability arises from improper caching of SSL content, allowing an attacker to obtain information or spoof content by redirecting a user to a malicious site with the same host name as the target, causing cached conte...

CVE-2006-3640

CVE-2006-3640 is an Information Disclosure vulnerability in Microsoft Internet Explorer (IE 5.01 and 6) where a script can persist across navigations to reveal the window location in another domain/IE zone. The NVD description matches a Window Location Information Disclosure Vector, and the conne...

CVE-2007-0811

CVE-2007-0811 affects Microsoft Internet Explorer 6.0 SP1 on Windows 2000 and IE 6.0 SP2 on Windows XP. The vulnerability is a NULL pointer dereference in the browser triggered by processing an HTML document containing a specific JavaScript for loop with an empty loop body, potentially involving ...