Lucene search

K

8 matches found

CVE
CVE
added 2005/08/10 4:0 a.m.126 views

CVE-2005-1988

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption Vulnerability".

5.1CVSS7.3AI score0.83438EPSS
CVE
CVE
added 2005/08/10 4:0 a.m.60 views

CVE-2005-1990

Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, including (1) devenum.dll, (2) diactfrm.dll, (3) wmm...

5.1CVSS7.6AI score0.82179EPSS
CVE
CVE
added 2005/05/02 4:0 a.m.57 views

CVE-2005-0056

Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the "Channel Definition Format (CDF) Cross Domain Vulnerability."

5.1CVSS7AI score0.32535EPSS
CVE
CVE
added 2005/08/10 4:0 a.m.53 views

CVE-2005-1989

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, aka "Web Folder Behaviors Cross-Domain Vulnerability".

7.5CVSS6.7AI score0.62784EPSS
CVE
CVE
added 2005/06/21 4:0 a.m.49 views

CVE-2001-1489

Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.

5CVSS7AI score0.13452EPSS
CVE
CVE
added 2005/05/02 4:0 a.m.48 views

CVE-2005-0054

Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding ...

5.1CVSS7.5AI score0.38328EPSS
CVE
CVE
added 2005/02/13 5:0 a.m.47 views

CVE-2004-0869

Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection....

5CVSS6.6AI score0.1568EPSS
CVE
CVE
added 2005/07/05 4:0 a.m.45 views

CVE-2005-2087

Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that...

5CVSS7.6AI score0.65273EPSS