CVE-2006-3280

Microsoft Internet Explorer suffers a cross-domain information disclosure vulnerability (CVE-2006-3280) where an object tag with a data parameter referencing an attacker’s page can cause content to be exposed via the outerHTML attribute due to IE’s cross-domain data access restrictions. The CP ad...

CVE-2006-3591

CVE-2006-3591 affects Microsoft Internet Explorer 6.0. The vulnerability arises when code accesses the URL property of a TriEditDocument.TriEditDocument object before initialization, causing a NULL pointer dereference and an application crash (denial of service). The description consistently stat...

CVE-2006-3659

Microsoft Internet Explorer 6 is affected by CVE-2006-3659. The vulnerability enables remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object. The public description across sources consistently states this is a crash/DoS vector i...

CVE-2007-3075

CVE-2007-3075: Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme (e.g., encoded backslash). The connected documents confirm the vulnerability description but do not spec...

CVE-2007-3930

The CVE-2007-3930 entry concerns a XSS vulnerability in DokuWiki’s spellchecker backend. Affects DokuWiki spellcheck.php (lib/exe/spellcheck.php) where the spell_utf8test path triggers HTML document identification and script execution by Internet Explorer when validating UTF-8 messages, even if t...

CVE-2007-4042

Technical details for CVE-2007-4042 are not provided in the connected documents. The initial description mentions remote command execution via URI injection in Netscape Navigator 9, but no vendor/product/version specifics or fixes are supplied here.

CVE-2008-2256

CVE-2008-2256 is an uninitialized memory corruption vulnerability in Microsoft Internet Explorer 5.01, 6, and 7. The issue arises when IE handles objects that were not correctly initialized or that have been deleted, enabling remote code execution and a crash. Multiple connected sources confirm t...

CVE-2008-2841

The CVE-2008-2841 entry concerns XChat on Windows (versions 2.8.7b and earlier). The root cause is an argument injection vulnerability that occurs when Internet Explorer is used, allowing remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI. The connected d...

CVE-2008-4259

CVE-2008-4259 concerns Microsoft Internet Explorer 7. A remote code execution vulnerability arises when IE7 mishandles memory during WebDAV requests for files with long names, leading to memory corruption via a crafted HTML page. The issue is exploitable by remote attackers who can trigger the co...

CVE-2008-5553

Microsoft Internet Explorer 8.0 Beta 2 contains an XSS Filter vulnerability: the anti-XSS filter disables itself when it encounters a crafted X-XSS-Protection header after a CRLF, allowing remote attackers to bypass the XSS protection and perform XSS. This vulnerability is identified as CVE-2008-...

CVE-2009-2655

CVE-2009-2655 describes a denial-of-service vulnerability in mshtml.dll used by Microsoft Internet Explorer 7/8 on Windows XP SP3. The issue is triggered when the JavaScript findText method is called with a crafted Unicode string in the first argument and only one additional argument (e.g., a sec...

CVE-2009-5159

Invision Power Board (IPB) 2.x–3.0.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via a .txt attachment when using Internet Explorer 5. The issue is explicitly described as XSS, but the available documents do not provide deeper details on the root cause beyond t...

CVE-2010-2118

Microsoft Internet Explorer vulnerable components: Internet Explorer 6.0.2900.2180 and 8.0.7600.16385. Root cause: JavaScript code that loops indefinitely to create IFRAMEs for invalid news:// URIs, triggering a denial of service through resource consumption. Affected product surfaces are browser...

CVE-2011-1246

CVE-2011-1246 affects Microsoft Internet Explorer 8. It arises from improper handling of content settings in HTTP responses, enabling MIME sniffing information disclosure where a remote attacker could obtain sensitive data from a different domain or zone. The vulnerability is associated with IE8’...

CVE-2013-3113

Microsoft Internet Explorer 6–10 was affected by memory-corruption vulnerabilities leading to remote code execution or DoS via crafted web content (CVE-2013-3112/3113/3121/3139/3142). The issues affect IE6–IE10 and are tied to a memory corruption flaw described as the 'Internet Explorer Memory Co...

CVE-2013-3126

CVE-2013-3126 corresponds to a memory handling vulnerability in Microsoft Internet Explorer (IE) 9/10 when script debugging is enabled, enabling remote code execution via a crafted web page. The issue stems from improper handling of memory objects during script processing, allowing an attacker to...

CVE-2013-3188

CVE-2013-3188 affects Microsoft Internet Explorer 8 and 9. The vulnerability allows remote code execution via a crafted web site due to memory corruption, enabling an attacker to run arbitrary code. The entry is coordinated with CVE-2013-3189 and is associated with MS13-059 (patch/mitigation). Af...

CVE-2013-3910

CVE-2013-3910 is an Internet Explorer memory corruption race condition exploited via a Use-After-Free in the CSelectTracker handling. The ZDI-13-264 advisory specifies that adversaries can obtain remote code execution by enticing a user to visit a crafted page that manipulates document elements t...

CVE-2013-5051

CVE-2013-5051 affects Microsoft Internet Explorer 10 and 11, allowing a remote attacker to execute arbitrary code or cause a memory corruption-based DoS by visiting a crafted web page. The vulnerability stems from an error in how Internet Explorer accesses an object in memory, enabling remote cod...

CVE-2014-1775

CVE-2014-1775 corresponds to the Microsoft Internet Explorer Memory Corruption vulnerability exposed by MS14-035. Affected software is Internet Explorer versions 6 through 11. The initial and connected sources describe a memory corruption/use-after-free scenario that can be triggered by visiting ...

CVE-2014-1789

CVE-2014-1789 affects Microsoft Internet Explorer 10. The vulnerability involves memory corruption triggered by visiting a crafted web site, enabling remote code execution or memory corruption as described for IE10. The records clearly distinguish it from CVE-2014-1790. Publicly cited sources ref...

CVE-2014-1794

Technical details for CVE-2014-1794 are not publicly available in the provided documents. No affected products, root cause, or remediation are stated here. Monitor for updates in the connected sources.

CVE-2014-2753

CVE-2014-1785 affects Microsoft Internet Explorer 11 with a memory corruption vulnerability triggered by a crafted web site. The CIRCL sighting shows exploitation activity, referencing Exploit-DB exploit 40946, indicating that the vulnerability was seen in the wild. No remediation details are pro...

CVE-2014-2765

Microsoft Internet Explorer 9–11 is affected by CVE-2014-2765, described as a memory corruption vulnerability exploitable via a crafted web site that could allow remote code execution or cause a denial of service. The vulnerability is identified as the same family as other IE memory corruption CV...

CVE-2014-2770

CVE-2014-2770 is a memory-corruption vulnerability in Microsoft Internet Explorer 8 that can allow remote code execution or a denial of service when visiting a crafted website. The entry states it is a distinct vulnerability from CVE-2014-1781, CVE-2014-1792, and CVE-2014-1804. The available docu...

CVE-2014-2788

CVE-2014-2788 affects Microsoft Internet Explorer 6 and 7, with memory corruption allowing remote code execution or denial of service when visiting a crafted site. The linked records corroborate this family of vulnerabilities in IE and note the vulnerability is addressable via public updates (MS1...

CVE-2014-2800

Microsoft Internet Explorer versions 6–11 are affected by memory corruption vulnerabilities identified as CVE-2014-2800 (and related CVEs 2807/2809). A crafted web site can trigger remote code execution or memory corruption, potentially allowing attacker-controlled actions. Public exploits exist ...

CVE-2014-2809

CVE-2014-2809 affects Microsoft Internet Explorer 6–11 and is described as a memory corruption vulnerability in a crafted web site that can enable remote code execution or memory-based denial of service. The issue is one of several IE memory corruption vulnerabilities disclosed in MS14-037; the c...

CVE-2015-0069

CVE-2015-0069 affects Internet Explorer 10 and 11 and is described as an ASLR bypass vulnerability that can be triggered by visiting a crafted webpage, enabling a remote attacker to bypass address space layout randomization and potentially execute code. Public exploits exist for this vulnerabilit...

CVE-2015-1660

CVE-2015-1660 affects Microsoft Internet Explorer (IE) 9–11, where a crafted web page can trigger memory corruption, allowing remote code execution or a DoS. The vulnerability arises from how IE handles a certain object that is not correctly initialized or has been deleted. Exploitation is remote...

CVE-2015-2421

CVE-2015-2421 is a Microsoft Internet Explorer ASLR bypass affecting IE 6–11. The root cause is memory/ASLR handling allowing remote code execution via a crafted webpage. The issue is addressed by security update MS15-065, which covers IE vulnerabilities and requires applying the update for affec...

CVE-2015-6079

CVE-2015-6079 concerns Microsoft Internet Explorer 11 memory corruption vulnerability that enables remote code execution or denial of service via a crafted web site. The connected CNVD/NVD entries describe a memory corruption flaw in IE11 (and related components) leading to arbitrary code executi...

CVE-2016-0107

CVE-2016-0107 affects Microsoft Internet Explorer (IE) 9–11 and relatedly Microsoft Edge, where memory corruption can be triggered by a crafted web site, enabling remote code execution or memory corruption. This family is the same IE memory corruption issue as other CVEs in 2016-0105/0107/0111/01...

CVE-2016-3292

CVE-2016-3292 is the Internet Explorer Elevation of Privilege vulnerability. The connected MS advisories (MS16-104, KB3185319, and related MSRC entries) confirm that Internet Explorer on affected Windows versions mishandles zone and integrity settings, enabling sandbox bypass via a crafted webpag...

CVE-1999-1241

CVE-1999-1241 : Concrete details available. Affected product: Internet Explorer. Vulnerable component: FileSystemObject ActiveX object accessed from a web page. Root cause: security setting below Medium allows a malicious page to cause arbitrary command execution via the ActiveX control. Impact: ...

CVE-2001-0322

CVE-2001-0322 concerns MSHTML.DLL HTML parser in Internet Explorer 4.0 and newer, where a script that creates and deletes an object tied to the browser window object can trigger a denial of service (application crash). The vulnerability is described as remote, with impact limited to availability ...

CVE-2001-0664

Summary (CVE-2001-0664 / CVE-2001-0724): Internet Explorer 5.01 and 5.5 are vulnerable to a zone-spoofing flaw where dotless IP addresses in URLs cause the page to be treated as Intranet Zone, bypassing some security restrictions. This can enable execution of scripts/ActiveX that would otherwise ...

CVE-2002-0193

CVE-2002-0193 affects Microsoft Internet Explorer 5.01 and 6.0. The issue arises in how IE handles Content-Disposition and Content-Type headers for downloaded files, resulting in the spoofed file type being passed back to the operating system for handling rather than showing an error. This can al...

CVE-2002-1217

The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...

CVE-2003-0447

The CVE-2003-0447 issue affects Internet Explorer versions 5.01, 5.5 and 6.0, where the Custom HTTP Errors capability can be abused via an argument to shdocvw.dll to generate a javascript: link, enabling remote script execution in the Local Zone. The vulnerability is described as allowing remote ...

CVE-2004-0719

The CVE-2004-0719 frame-injection vulnerability affects Internet Explorer on Windows (IE6 on XP) and IE for Mac 5.2.3, arising from insufficient protection against framing content across domains, enabling content injection and potential site spoofing. Exploitation details are not fully provided i...

CVE-2004-2219

The CVE-2004-2219 issue affects Microsoft Internet Explorer, specifically IE6, with a vulnerability in the address bar update method. CPAI-2015-1219 attributes the root cause to incorrect handling of unknown protocol handlers, enabling a sequence of steps in IE to make attacker-supplied content a...

CVE-2006-5162

CVE-2006-5162 affects wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier. A long Content-Type header can trigger a stack overflow, causing a remote denial of service (unhandled exception and crash). The vulnerability has NETWORK attack vector with LOW complexity and no authentication ...

CVE-2006-5579

CVE-2006-5579 is a remote-code-execution vulnerability in Microsoft Internet Explorer 6. IE 6 can execute arbitrary code by JavaScript causing certain errors that access previously freed memory (Script Error Handling Memory Corruption). Several related issues (CVE-2006-5581, CVE-2006-5578, CVE-20...

CVE-2007-3493

The CVE-2007-3493 entry concerns an ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 used by NCTAudioStudio (NCTAudioStudio2) 2.7, which allows remote attackers to create or overwrite arbitrary files by passing a full pathname to CreateFile. Connected sources also reference CVE-2007-3400, des...

CVE-2007-3576

Microsoft Internet Explorer 6 is affected by a vulnerability where web scripts can be executed from URIs using arbitrary scheme names that end with the sequence “script.” This uses the vbscript: handler for seven to nine character scheme names and the javascript: handler for ten or more character...

CVE-2008-2281

The CVE-2008-2281 entry describes a cross-zone scripting vulnerability in Internet Explorer’s Print Table of Links feature affecting IE 6.0, 7.0, and 8.0b. The issue allows user-assisted remote attackers to inject arbitrary web script or HTML into the Local Machine Zone via an HTML document conta...

CVE-2008-2948

CVE-2008-2948 is documented as a cross-domain vulnerability in Internet Explorer, described as a duplicate/related attack to CVE-2008-2947. The connected sources indicate it affects IE, involves window location cross-domain handling via the Object data type, and is tied to the same family of vuln...

CVE-2008-3475

CVE-2008-3475 affects Microsoft Internet Explorer 6. The vulnerability arises from improper handling of componentFromPoint on XML objects that are uninitialized or deleted, enabling an attacker to execute arbitrary code via a crafted HTML page. Impact includes remote code execution with the attac...

CVE-2008-4260

CVE-2008-4260 : An uninitialized memory corruption vulnerability in Microsoft Internet Explorer 7 occurs when IE accesses an object that has been deleted. Exploitation via a specially crafted HTML page could allow remote code execution with the caller’s privileges. The issue is part of a set of I...