CVE-2014-2754

Microsoft Internet Explorer 9 memory corruption vulnerability CVE-2014-2754 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, and is described as a memory corruption issue distinct from CVE-2014-1774 and CVE-2014-1788. The provided documents do...

CVE-2014-2765

Microsoft Internet Explorer 9–11 is affected by CVE-2014-2765, described as a memory corruption vulnerability exploitable via a crafted web site that could allow remote code execution or cause a denial of service. The vulnerability is identified as the same family as other IE memory corruption CV...

CVE-2014-2770

CVE-2014-2770 is a memory-corruption vulnerability in Microsoft Internet Explorer 8 that can allow remote code execution or a denial of service when visiting a crafted website. The entry states it is a distinct vulnerability from CVE-2014-1781, CVE-2014-1792, and CVE-2014-1804. The available docu...

CVE-2014-2788

CVE-2014-2788 affects Microsoft Internet Explorer 6 and 7, with memory corruption allowing remote code execution or denial of service when visiting a crafted site. The linked records corroborate this family of vulnerabilities in IE and note the vulnerability is addressable via public updates (MS1...

CVE-2014-2798

CVE-2014-2798 affects Microsoft Internet Explorer 8–11. The connected Kaspersky advisory KLA10602 lists multiple IE vulnerabilities and explicitly includes CVE-2014-2798 in its CVE list, describing that remote attackers can exploit via a specially crafted web site or URL to gain privileges or exe...

CVE-2014-2809

CVE-2014-2809 affects Microsoft Internet Explorer 6–11 and is described as a memory corruption vulnerability in a crafted web site that can enable remote code execution or memory-based denial of service. The issue is one of several IE memory corruption vulnerabilities disclosed in MS14-037; the c...

CVE-2015-0043

CVE-2015-0043 affects Microsoft Internet Explorer 8–11. The vulnerability allows remote code execution or memory corruption via a crafted web page, as described in MS15-009. The Nessus/KB data confirm IE memory corruption and remote code execution potential, with public exploits known for this vu...

CVE-2015-0069

CVE-2015-0069 affects Internet Explorer 10 and 11 and is described as an ASLR bypass vulnerability that can be triggered by visiting a crafted webpage, enabling a remote attacker to bypass address space layout randomization and potentially execute code. Public exploits exist for this vulnerabilit...

CVE-2015-1660

CVE-2015-1660 affects Microsoft Internet Explorer (IE) 9–11, where a crafted web page can trigger memory corruption, allowing remote code execution or a DoS. The vulnerability arises from how IE handles a certain object that is not correctly initialized or has been deleted. Exploitation is remote...

CVE-2015-2398

CVE-2015-2398 affects Microsoft Internet Explorer 8–11, enabling remote attackers to bypass the XSS filter via a crafted HTML attribute. The issue is tied to multiple vendor advisories and was addressed by MS15-065 security update; see KB3065822 and related patches (e.g., 3076321) for affected OS...

CVE-2016-0104

CVE-2016-0104 affects Microsoft Internet Explorer 10. It is a remote memory-corruption vulnerability triggered by visiting a crafted webpage, caused by improper memory object handling that can lead to arbitrary code execution or memory corruption. Public exploits exist for this vulnerability (as ...

CVE-2016-0107

CVE-2016-0107 affects Microsoft Internet Explorer (IE) 9–11 and relatedly Microsoft Edge, where memory corruption can be triggered by a crafted web site, enabling remote code execution or memory corruption. This family is the same IE memory corruption issue as other CVEs in 2016-0105/0107/0111/01...

CVE-2016-3390

CVE-2016-3390 affects Microsoft Internet Explorer 11 and Microsoft Edge, involving memory corruption in the Chakra-based scripting engine that can lead to remote code execution or memory corruption via a crafted website. Connected sources (GHSA-CHAKRACORE RCE) reiterate a ChakraCore RCE vector ti...

CVE-1999-0917

The CVE-1999-0917 issue concerns the Preloader ActiveX control used by Internet Explorer. The vulnerability allows remote attackers to read arbitrary files via this ActiveX component. The affected target is the Preloader ActiveX control in IE, with a potential impact to confidentiality (partial) ...

CVE-1999-1241

CVE-1999-1241 : Concrete details available. Affected product: Internet Explorer. Vulnerable component: FileSystemObject ActiveX object accessed from a web page. Root cause: security setting below Medium allows a malicious page to cause arbitrary command execution via the ActiveX control. Impact: ...

CVE-1999-1453

The CVE-1999-1453 issue concerns Internet Explorer 4 where a remote attacker can read the contents of a user’s clipboard through the Internet WebBrowser ActiveX object. The description indicates an impact on clipboard confidentiality via a WebBrowser ActiveX component, triggered by visiting a mal...

CVE-2001-0664

Summary (CVE-2001-0664 / CVE-2001-0724): Internet Explorer 5.01 and 5.5 are vulnerable to a zone-spoofing flaw where dotless IP addresses in URLs cause the page to be treated as Intranet Zone, bypassing some security restrictions. This can enable execution of scripts/ActiveX that would otherwise ...

CVE-2002-0193

CVE-2002-0193 affects Microsoft Internet Explorer 5.01 and 6.0. The issue arises in how IE handles Content-Disposition and Content-Type headers for downloaded files, resulting in the spoofed file type being passed back to the operating system for handling rather than showing an error. This can al...

CVE-2002-1217

The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...

CVE-2002-1984

Microsoft Internet Explorer 5.0.1–6.0 on Windows 2000/XP is vulnerable to a denial of service via a crafted OBJECT tag with CLSID:00022613-0000-0000-C000-000000000046. The issue, described across multiple sources (NVD, Red Hat, CVE records), places the root cause in how the CLSID is processed wit...

CVE-2003-0447

The CVE-2003-0447 issue affects Internet Explorer versions 5.01, 5.5 and 6.0, where the Custom HTTP Errors capability can be abused via an argument to shdocvw.dll to generate a javascript: link, enabling remote script execution in the Local Zone. The vulnerability is described as allowing remote ...

CVE-2004-0719

The CVE-2004-0719 frame-injection vulnerability affects Internet Explorer on Windows (IE6 on XP) and IE for Mac 5.2.3, arising from insufficient protection against framing content across domains, enabling content injection and potential site spoofing. Exploitation details are not fully provided i...

CVE-2006-2218

Microsoft Internet Explorer (IE) on Windows platforms is affected by CVE-2006-2218, an Exception Handling Memory Corruption vulnerability that could allow remote code execution when a user visits a specially crafted web page. The issue is triggered by how IE handles exceptional conditions in nest...

CVE-2006-2378

CVE-2006-2378 is a heap-based buffer overflow in the ART Image Rendering component (jgdw400.dll) used by AOL ART images in Microsoft Windows XP (SP1/SP2), Windows Server 2003 (SP1), and older/related OSes (including 98/Me). A crafted ART image can cause heap corruption, enabling remote code execu...

CVE-2006-3591

CVE-2006-3591 affects Microsoft Internet Explorer 6.0. The vulnerability arises when code accesses the URL property of a TriEditDocument.TriEditDocument object before initialization, causing a NULL pointer dereference and an application crash (denial of service). The description consistently stat...

CVE-2006-3659

Microsoft Internet Explorer 6 is affected by CVE-2006-3659. The vulnerability enables remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object. The public description across sources consistently states this is a crash/DoS vector i...

CVE-2006-5162

CVE-2006-5162 affects wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier. A long Content-Type header can trigger a stack overflow, causing a remote denial of service (unhandled exception and crash). The vulnerability has NETWORK attack vector with LOW complexity and no authentication ...

CVE-2006-5579

CVE-2006-5579 is a remote-code-execution vulnerability in Microsoft Internet Explorer 6. IE 6 can execute arbitrary code by JavaScript causing certain errors that access previously freed memory (Script Error Handling Memory Corruption). Several related issues (CVE-2006-5581, CVE-2006-5578, CVE-20...

CVE-2007-3493

The CVE-2007-3493 entry concerns an ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 used by NCTAudioStudio (NCTAudioStudio2) 2.7, which allows remote attackers to create or overwrite arbitrary files by passing a full pathname to CreateFile. Connected sources also reference CVE-2007-3400, des...

CVE-2007-4042

Technical details for CVE-2007-4042 are not provided in the connected documents. The initial description mentions remote command execution via URI injection in Netscape Navigator 9, but no vendor/product/version specifics or fixes are supplied here.

CVE-2008-2281

The CVE-2008-2281 entry describes a cross-zone scripting vulnerability in Internet Explorer’s Print Table of Links feature affecting IE 6.0, 7.0, and 8.0b. The issue allows user-assisted remote attackers to inject arbitrary web script or HTML into the Local Machine Zone via an HTML document conta...

CVE-2008-2841

The CVE-2008-2841 entry concerns XChat on Windows (versions 2.8.7b and earlier). The root cause is an argument injection vulnerability that occurs when Internet Explorer is used, allowing remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI. The connected d...

CVE-2008-4260

CVE-2008-4260 : An uninitialized memory corruption vulnerability in Microsoft Internet Explorer 7 occurs when IE accesses an object that has been deleted. Exploitation via a specially crafted HTML page could allow remote code execution with the caller’s privileges. The issue is part of a set of I...

CVE-2009-2655

CVE-2009-2655 describes a denial-of-service vulnerability in mshtml.dll used by Microsoft Internet Explorer 7/8 on Windows XP SP3. The issue is triggered when the JavaScript findText method is called with a crafted Unicode string in the first argument and only one additional argument (e.g., a sec...

CVE-2009-5159

Invision Power Board (IPB) 2.x–3.0.4 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via a .txt attachment when using Internet Explorer 5. The issue is explicitly described as XSS, but the available documents do not provide deeper details on the root cause beyond t...

CVE-2010-2557

CVE-2010-2557 is an Internet Explorer 6 memory-corruption vulnerability (Uninitialized Memory Corruption) where an object that is not properly initialized or is deleted can be exploited by a crafted web page to execute arbitrary code remotely. The issue is part of a family of IE flaws disclosed i...

CVE-2011-1960

CVE-2011-1960 corresponds to an Information Disclosure vulnerability in Microsoft Internet Explorer 6–9 due to improper handling of JavaScript event handlers, allowing cross-domain/zone access via crafted pages. MS11-057 (Cumulative Security Update for Internet Explorer, 2559049) is the indicated...

CVE-2011-1962

Microsoft Internet Explorer 6–9 are affected by a Shift JIS character-encoding vulnerability where crafted pages can cause inactive filtering to leak content across domains or zones. This CVE (CVE-2011-1962) maps to a broader set of IE vulnerabilities addressed by MS11-057 (KB 2559049); the updat...

CVE-2013-0030

CVE-2013-0030 concerns memory corruption in Internet Explorer’s Vector Markup Language (VML) implementation. Multiple connected sources confirm the vulnerability affects IE versions 6–10 and stems from improper buffer allocation, enabling remote code execution via a crafted web page. The issue is...

CVE-2013-3113

Microsoft Internet Explorer 6–10 was affected by memory-corruption vulnerabilities leading to remote code execution or DoS via crafted web content (CVE-2013-3112/3113/3121/3139/3142). The issues affect IE6–IE10 and are tied to a memory corruption flaw described as the 'Internet Explorer Memory Co...

CVE-2013-3126

CVE-2013-3126 corresponds to a memory handling vulnerability in Microsoft Internet Explorer (IE) 9/10 when script debugging is enabled, enabling remote code execution via a crafted web page. The issue stems from improper handling of memory objects during script processing, allowing an attacker to...

CVE-2014-1780

The connected document provides concrete details for Internet Explorer memory corruption stemming from a use-after-free in IE 10/11 related to CVE-2014-1772 (not exactly CVE-2014-1780, but in the same family). It explains how memory corruption can be triggered by a crafted web page, enabling remo...

CVE-2014-1790

Microsoft Internet Explorer 10 is affected by CVE-2014-1790, a memory-corruption vulnerability that can be triggered by a crafted web site, enabling remote code execution or memory-corruption DoS. Root cause: memory corruption in IE10. Mitigation: apply MS14-035 Security Update for Internet Explo...

CVE-2014-1799

CVE-2014-1799 refers to an Internet Explorer memory corruption vulnerability (IE6–IE11) exploited via crafted web pages. Connected content describes a Use-After-Free (UAF) scenario in memory management leading to an invalid pointer dereference and a crash, with discussions of related POC/Exploits...

CVE-2014-2772

CVE-2014-2772 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site, enabling remote code execution or denial of service. Affected software is Internet Explorer 11; root cause is memory corruption in IE11 when processing malicious content from the web. The CVE family is...

CVE-2014-2776

CVE-2014-2776 affects Microsoft Internet Explorer 11 . The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption. The connected NVD entry confirms this description but does not specify product version ranges...

CVE-2014-2800

Microsoft Internet Explorer versions 6–11 are affected by memory corruption vulnerabilities identified as CVE-2014-2800 (and related CVEs 2807/2809). A crafted web site can trigger remote code execution or memory corruption, potentially allowing attacker-controlled actions. Public exploits exist ...

CVE-2014-4129

CVE-2014-4129 affects Microsoft Internet Explorer (notably IE8) and is described in connected sources as a remote memory-corruption vulnerability exploitable via a crafted web page. The underlying issue is memory corruption that could allow remote code execution or a denial of service when proces...

CVE-2014-6323

CVE-2014-6323 affects Microsoft Internet Explorer versions 7–11, allowing remote attackers to obtain sensitive clipboard information via a crafted web page. The root cause is an information-disclosure vulnerability in IE’s handling of clipboard data when loading content from a web page. Public ex...

CVE-2015-2427

CVE-2015-2427 is a memory-corruption vulnerability in Microsoft Internet Explorer 9 that allows remote code execution or denial of service via a crafted webpage. The issue is addressed by the MS15-112 security update for Internet Explorer; the linked materials note this as part of a broader set o...