CVE-2001-0664

Summary (CVE-2001-0664 / CVE-2001-0724): Internet Explorer 5.01 and 5.5 are vulnerable to a zone-spoofing flaw where dotless IP addresses in URLs cause the page to be treated as Intranet Zone, bypassing some security restrictions. This can enable execution of scripts/ActiveX that would otherwise ...

CVE-2002-0193

CVE-2002-0193 affects Microsoft Internet Explorer 5.01 and 6.0. The issue arises in how IE handles Content-Disposition and Content-Type headers for downloaded files, resulting in the spoofed file type being passed back to the operating system for handling rather than showing an error. This can al...

CVE-2002-1217

The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...

CVE-2003-0530

The vulnerability CVE-2003-0530 is a buffer overflow in the BR549.DLL ActiveX control used by Internet Explorer (IE) 5.01 SP3 through 6.0 SP1, allowing remote code execution when processing crafted HTML. OpenVAS notes the July 2004 IE cumulative patch should be applied; CERT/KB details describe t...

CVE-2004-0719

The CVE-2004-0719 frame-injection vulnerability affects Internet Explorer on Windows (IE6 on XP) and IE for Mac 5.2.3, arising from insufficient protection against framing content across domains, enabling content injection and potential site spoofing. Exploitation details are not fully provided i...

CVE-2006-1186

CVE-2006-1186 is a remote-code-execution vulnerability in Microsoft Internet Explorer 5.01–6 caused by instantiating certain COM objects (Mdt2gddr.dll, Mdt2dd.dll, Mdt2gddo.dll) as ActiveX controls, leading to memory corruption. Connected MS docs describe that the issue is addressed by the MS06-0...

CVE-2006-2218

Microsoft Internet Explorer (IE) on Windows platforms is affected by CVE-2006-2218, an Exception Handling Memory Corruption vulnerability that could allow remote code execution when a user visits a specially crafted web page. The issue is triggered by how IE handles exceptional conditions in nest...

CVE-2006-3591

CVE-2006-3591 affects Microsoft Internet Explorer 6.0. The vulnerability arises when code accesses the URL property of a TriEditDocument.TriEditDocument object before initialization, causing a NULL pointer dereference and an application crash (denial of service). The description consistently stat...

CVE-2006-3657

Microsoft Internet Explorer 6 contains a vulnerability in the DXImageTransform.Microsoft.Gradient ActiveX object. A long StartColorStr or EndColorStr property can trigger a remote denial of service via a stack overflow. Affected: IE6; vulnerability impact is to crash/partial availability. The doc...

CVE-2006-5162

CVE-2006-5162 affects wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier. A long Content-Type header can trigger a stack overflow, causing a remote denial of service (unhandled exception and crash). The vulnerability has NETWORK attack vector with LOW complexity and no authentication ...

CVE-2006-5579

CVE-2006-5579 is a remote-code-execution vulnerability in Microsoft Internet Explorer 6. IE 6 can execute arbitrary code by JavaScript causing certain errors that access previously freed memory (Script Error Handling Memory Corruption). Several related issues (CVE-2006-5581, CVE-2006-5578, CVE-20...

CVE-2007-3493

The CVE-2007-3493 entry concerns an ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 used by NCTAudioStudio (NCTAudioStudio2) 2.7, which allows remote attackers to create or overwrite arbitrary files by passing a full pathname to CreateFile. Connected sources also reference CVE-2007-3400, des...

CVE-2007-5158

Technical details for CVE-2007-5158 are not provided in the connected documents. The Initial Description notes focus-stealing via onkeydown in IE6, but no concrete product, impact, or remediation is included here. Monitor for official updates.

CVE-2008-2281

The CVE-2008-2281 entry describes a cross-zone scripting vulnerability in Internet Explorer’s Print Table of Links feature affecting IE 6.0, 7.0, and 8.0b. The issue allows user-assisted remote attackers to inject arbitrary web script or HTML into the Local Machine Zone via an HTML document conta...

CVE-2008-3475

CVE-2008-3475 affects Microsoft Internet Explorer 6. The vulnerability arises from improper handling of componentFromPoint on XML objects that are uninitialized or deleted, enabling an attacker to execute arbitrary code via a crafted HTML page. Impact includes remote code execution with the attac...

CVE-2009-5159

Invision Power Board (IPB) 2.x–3.0.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via a .txt attachment when using Internet Explorer 5. The issue is explicitly described as XSS, but the available documents do not provide deeper details on the root cause beyond t...

CVE-2010-1127

CVE-2010-1127 affects Microsoft Internet Explorer 6 and 7. The vulnerability arises when executing the createElement method, where certain data structures are not initialized, enabling a remote attacker to cause a denial of service via crafted JavaScript. Specifically, setting the (1) outerHTML o...

CVE-2011-1246

CVE-2011-1246 affects Microsoft Internet Explorer 8. It arises from improper handling of content settings in HTTP responses, enabling MIME sniffing information disclosure where a remote attacker could obtain sensitive data from a different domain or zone. The vulnerability is associated with IE8’...

CVE-2011-1258

CVE-2011-1258 affects Microsoft Internet Explorer 6–8. The vulnerability arises from improper restriction of web scripting, enabling a user‑assisted attacker to disclose sensitive information from a different domain/zone via drag‑and‑drop. Impact is partial confidentiality loss. Remediation: appl...

CVE-2011-1960

CVE-2011-1960 corresponds to an Information Disclosure vulnerability in Microsoft Internet Explorer 6–9 due to improper handling of JavaScript event handlers, allowing cross-domain/zone access via crafted pages. MS11-057 (Cumulative Security Update for Internet Explorer, 2559049) is the indicated...

CVE-2011-1962

Microsoft Internet Explorer 6–9 are affected by a Shift JIS character-encoding vulnerability where crafted pages can cause inactive filtering to leak content across domains or zones. This CVE (CVE-2011-1962) maps to a broader set of IE vulnerabilities addressed by MS11-057 (KB 2559049); the updat...

CVE-2013-0030

CVE-2013-0030 concerns memory corruption in Internet Explorer’s Vector Markup Language (VML) implementation. Multiple connected sources confirm the vulnerability affects IE versions 6–10 and stems from improper buffer allocation, enabling remote code execution via a crafted web page. The issue is...

CVE-2013-3113

Microsoft Internet Explorer 6–10 was affected by memory-corruption vulnerabilities leading to remote code execution or DoS via crafted web content (CVE-2013-3112/3113/3121/3139/3142). The issues affect IE6–IE10 and are tied to a memory corruption flaw described as the 'Internet Explorer Memory Co...

CVE-2014-1790

Microsoft Internet Explorer 10 is affected by CVE-2014-1790, a memory-corruption vulnerability that can be triggered by a crafted web site, enabling remote code execution or memory-corruption DoS. Root cause: memory corruption in IE10. Mitigation: apply MS14-035 Security Update for Internet Explo...

CVE-2014-1799

CVE-2014-1799 refers to an Internet Explorer memory corruption vulnerability (IE6–IE11) exploited via crafted web pages. Connected content describes a Use-After-Free (UAF) scenario in memory management leading to an invalid pointer dereference and a crash, with discussions of related POC/Exploits...

CVE-2014-2753

CVE-2014-1785 affects Microsoft Internet Explorer 11 with a memory corruption vulnerability triggered by a crafted web site. The CIRCL sighting shows exploitation activity, referencing Exploit-DB exploit 40946, indicating that the vulnerability was seen in the wild. No remediation details are pro...

CVE-2014-2765

Microsoft Internet Explorer 9–11 is affected by CVE-2014-2765, described as a memory corruption vulnerability exploitable via a crafted web site that could allow remote code execution or cause a denial of service. The vulnerability is identified as the same family as other IE memory corruption CV...

CVE-2014-2770

CVE-2014-2770 is a memory-corruption vulnerability in Microsoft Internet Explorer 8 that can allow remote code execution or a denial of service when visiting a crafted website. The entry states it is a distinct vulnerability from CVE-2014-1781, CVE-2014-1792, and CVE-2014-1804. The available docu...

CVE-2014-2788

CVE-2014-2788 affects Microsoft Internet Explorer 6 and 7, with memory corruption allowing remote code execution or denial of service when visiting a crafted site. The linked records corroborate this family of vulnerabilities in IE and note the vulnerability is addressable via public updates (MS1...

CVE-2014-2791

CVE-2014-2791 affects Microsoft Internet Explorer (notably IE 9) and is a remote memory-corruption vulnerability triggered via a crafted web site. The issue allows remote code execution or memory corruption leading to a potential denial of service when a user visits a malicious page. Several conn...

CVE-2014-2798

CVE-2014-2798 affects Microsoft Internet Explorer 8–11. The connected Kaspersky advisory KLA10602 lists multiple IE vulnerabilities and explicitly includes CVE-2014-2798 in its CVE list, describing that remote attackers can exploit via a specially crafted web site or URL to gain privileges or exe...

CVE-2014-6323

CVE-2014-6323 affects Microsoft Internet Explorer versions 7–11, allowing remote attackers to obtain sensitive clipboard information via a crafted web page. The root cause is an information-disclosure vulnerability in IE’s handling of clipboard data when loading content from a web page. Public ex...

CVE-2015-0043

CVE-2015-0043 affects Microsoft Internet Explorer 8–11. The vulnerability allows remote code execution or memory corruption via a crafted web page, as described in MS15-009. The Nessus/KB data confirm IE memory corruption and remote code execution potential, with public exploits known for this vu...

CVE-2015-0066

CVE-2015-0066 affects Microsoft Internet Explorer 11. The vulnerability is a memory corruption flaw exploitable via a crafted web site, allowing remote code execution or a denial of service. The CIRCL sighting indicates exploitation activity (exploit-db reference 40757) for CVE-2015-0040, and IE ...

CVE-2015-1753

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability exploitable via a crafted web site, potentially allowing remote code execution or a denial of service. The CVE-2015-1753 entry is part of a set of related IE11 memory corruption vulnerabilities (distinct from CVE-2015...

CVE-2015-2398

CVE-2015-2398 affects Microsoft Internet Explorer 8–11, enabling remote attackers to bypass the XSS filter via a crafted HTML attribute. The issue is tied to multiple vendor advisories and was addressed by MS15-065 security update; see KB3065822 and related patches (e.g., 3076321) for affected OS...

CVE-2015-2421

CVE-2015-2421 is a Microsoft Internet Explorer ASLR bypass affecting IE 6–11. The root cause is memory/ASLR handling allowing remote code execution via a crafted webpage. The issue is addressed by security update MS15-065, which covers IE vulnerabilities and requires applying the update for affec...

CVE-2015-2427

CVE-2015-2427 is a memory-corruption vulnerability in Microsoft Internet Explorer 9 that allows remote code execution or denial of service via a crafted webpage. The issue is addressed by the MS15-112 security update for Internet Explorer; the linked materials note this as part of a broader set o...

CVE-2016-0104

CVE-2016-0104 affects Microsoft Internet Explorer 10. It is a remote memory-corruption vulnerability triggered by visiting a crafted webpage, caused by improper memory object handling that can lead to arbitrary code execution or memory corruption. Public exploits exist for this vulnerability (as ...

CVE-1999-0877

Affected product : Internet Explorer 5. The vulnerability allows a remote attacker to read files by invoking an ExecCommand on an IFRAME. The description provides the root cause as an insecure use of ExecCommand within an IFRAME context, enabling unauthorized file access. The connected documents ...

CVE-2000-0768

The CVE-2000-0768 issue affects Internet Explorer 4.x and 5.x where a function that verifies the domain of a frame within a browser window fails to properly verify, enabling a remote attacker to read client files. Affected component: the Frame Domain Verification logic in IE. Root cause: inadequa...

CVE-2001-0322

CVE-2001-0322 concerns MSHTML.DLL HTML parser in Internet Explorer 4.0 and newer, where a script that creates and deletes an object tied to the browser window object can trigger a denial of service (application crash). The vulnerability is described as remote, with impact limited to availability ...

CVE-2002-1185

CVE-2002-1185 affects Internet Explorer 5.01–6.0. The issue is a parsing flaw where PNG parameters are not properly checked when opening a PNG file, enabling a remote attacker to trigger a heap-based buffer overflow during decompression and cause a denial of service (crash). The connected documen...

CVE-2003-0447

The CVE-2003-0447 issue affects Internet Explorer versions 5.01, 5.5 and 6.0, where the Custom HTTP Errors capability can be abused via an argument to shdocvw.dll to generate a javascript: link, enabling remote script execution in the Local Zone. The vulnerability is described as allowing remote ...

CVE-2003-1105

CVE-2003-1105 concerns Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 that allows remote attackers to cause a denial of service (browser or Outlook Express crash) via HTML containing certain input tags that are not properly rendered. The description identifies the affected so...

CVE-2004-2090

CVE-2004-2090 : Microsoft Internet Explorer 5.0.1 through 6.0 is vulnerable via the VBScript LoadPicture method, which can be used by remote attackers to determine whether arbitrary files exist by observing error codes returned when the file is missing. The description in connected documents conf...

CVE-2004-2219

The CVE-2004-2219 issue affects Microsoft Internet Explorer, specifically IE6, with a vulnerability in the address bar update method. CPAI-2015-1219 attributes the root cause to incorrect handling of unknown protocol handlers, enabling a sequence of steps in IE to make attacker-supplied content a...

CVE-2005-0500

CVE-2005-0500 affects Microsoft Internet Explorer 6 (IE6) bundled with Windows XP; the vulnerability is in how IE displays the title bar for script-initiated popup windows. Reported issues include spoofing the displayed domain name or title content in popups, potentially misleading users into bel...

CVE-2007-3164

Technical details (affected product/version, root cause, impact or fixes) are not publicly detailed in the provided documents. Monitor for updates on CVE-2007-3164.

CVE-2007-3576

Microsoft Internet Explorer 6 is affected by a vulnerability where web scripts can be executed from URIs using arbitrary scheme names that end with the sequence “script.” This uses the vbscript: handler for seven to nine character scheme names and the javascript: handler for ten or more character...