CVE-2016-0107

CVE-2016-0107 affects Microsoft Internet Explorer (IE) 9–11 and relatedly Microsoft Edge, where memory corruption can be triggered by a crafted web site, enabling remote code execution or memory corruption. This family is the same IE memory corruption issue as other CVEs in 2016-0105/0107/0111/01...

CVE-2016-3390

CVE-2016-3390 affects Microsoft Internet Explorer 11 and Microsoft Edge, involving memory corruption in the Chakra-based scripting engine that can lead to remote code execution or memory corruption via a crafted website. Connected sources (GHSA-CHAKRACORE RCE) reiterate a ChakraCore RCE vector ti...

CVE-1999-0877

Affected product : Internet Explorer 5. The vulnerability allows a remote attacker to read files by invoking an ExecCommand on an IFRAME. The description provides the root cause as an insecure use of ExecCommand within an IFRAME context, enabling unauthorized file access. The connected documents ...

CVE-1999-0917

The CVE-1999-0917 issue concerns the Preloader ActiveX control used by Internet Explorer. The vulnerability allows remote attackers to read arbitrary files via this ActiveX component. The affected target is the Preloader ActiveX control in IE, with a potential impact to confidentiality (partial) ...

CVE-1999-1453

The CVE-1999-1453 issue concerns Internet Explorer 4 where a remote attacker can read the contents of a user’s clipboard through the Internet WebBrowser ActiveX object. The description indicates an impact on clipboard confidentiality via a WebBrowser ActiveX component, triggered by visiting a mal...

CVE-1999-1472

This CVE (CVE-1999-1472) affects Internet Explorer 4.0. The vulnerability allows a remote attacker to read arbitrary text and HTML files on the user’s machine by delivering a small IFRAME that uses Dynamic HTML (DHTML) to exfiltrate data (the Freiburg text-viewing issue). The connected records co...

CVE-2000-0266

The CVE-2000-0266 entry describes a vulnerability in Internet Explorer 5.01 where a malicious applet can bypass the cross-frame security policy by interacting with the Java JSObject to modify DOM properties, allowing an IFRAME to load an arbitrary JavaScript URL. This reveals a client-side cross-...

CVE-2001-0322

CVE-2001-0322 concerns MSHTML.DLL HTML parser in Internet Explorer 4.0 and newer, where a script that creates and deletes an object tied to the browser window object can trigger a denial of service (application crash). The vulnerability is described as remote, with impact limited to availability ...

CVE-2003-1105

CVE-2003-1105 concerns Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 that allows remote attackers to cause a denial of service (browser or Outlook Express crash) via HTML containing certain input tags that are not properly rendered. The description identifies the affected so...

CVE-2004-2219

The CVE-2004-2219 issue affects Microsoft Internet Explorer, specifically IE6, with a vulnerability in the address bar update method. CPAI-2015-1219 attributes the root cause to incorrect handling of unknown protocol handlers, enabling a sequence of steps in IE to make attacker-supplied content a...

CVE-2005-0500

CVE-2005-0500 affects Microsoft Internet Explorer 6 (IE6) bundled with Windows XP; the vulnerability is in how IE displays the title bar for script-initiated popup windows. Reported issues include spoofing the displayed domain name or title content in popups, potentially misleading users into bel...

CVE-2005-2829

CVE-2005-2829 corresponds to a File Download Dialog Box Manipulation vulnerability in Microsoft Internet Explorer 5.01/5.5/6 that could allow remote code execution via attacker‑supplied content and user interaction. Exploitation involves overlaying a malicious dialog and delaying the Run/Open act...

CVE-2005-4089

CVE-2005-4089 is a cross-domain information disclosure vulnerability in Internet Explorer, triggered by parsing a CSS file via the @import directive. The flaw allows an attacker to read data from another IE security zone or domain when a user visits a specially crafted page or opens a crafted lin...

CVE-2006-1186

CVE-2006-1186 is a remote-code-execution vulnerability in Microsoft Internet Explorer 5.01–6 caused by instantiating certain COM objects (Mdt2gddr.dll, Mdt2dd.dll, Mdt2gddo.dll) as ActiveX controls, leading to memory corruption. Connected MS docs describe that the issue is addressed by the MS06-0...

CVE-2006-3657

Microsoft Internet Explorer 6 contains a vulnerability in the DXImageTransform.Microsoft.Gradient ActiveX object. A long StartColorStr or EndColorStr property can trigger a remote denial of service via a stack overflow. Affected: IE6; vulnerability impact is to crash/partial availability. The doc...

CVE-2006-5162

CVE-2006-5162 affects wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier. A long Content-Type header can trigger a stack overflow, causing a remote denial of service (unhandled exception and crash). The vulnerability has NETWORK attack vector with LOW complexity and no authentication ...

CVE-2006-5579

CVE-2006-5579 is a remote-code-execution vulnerability in Microsoft Internet Explorer 6. IE 6 can execute arbitrary code by JavaScript causing certain errors that access previously freed memory (Script Error Handling Memory Corruption). Several related issues (CVE-2006-5581, CVE-2006-5578, CVE-20...

CVE-2007-3075

CVE-2007-3075: Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal sequences in a URI with a certain scheme (e.g., encoded backslash). The connected documents confirm the vulnerability description but do not spec...

CVE-2007-3493

The CVE-2007-3493 entry concerns an ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 used by NCTAudioStudio (NCTAudioStudio2) 2.7, which allows remote attackers to create or overwrite arbitrary files by passing a full pathname to CreateFile. Connected sources also reference CVE-2007-3400, des...

CVE-2007-3930

The CVE-2007-3930 entry concerns a XSS vulnerability in DokuWiki’s spellchecker backend. Affects DokuWiki spellcheck.php (lib/exe/spellcheck.php) where the spell_utf8test path triggers HTML document identification and script execution by Internet Explorer when validating UTF-8 messages, even if t...

CVE-2008-0076

Summary of CVE-2008-0076 (HTML Rendering Memory Corruption in Internet Explorer) : A remote code execution vulnerability in Microsoft Internet Explorer versions 5.01, 6 SP1/SP2, and 7 due to how IE renders HTML with certain layout combinations. An attacker could craft a page that, when viewed, ex...

CVE-2008-3475

CVE-2008-3475 affects Microsoft Internet Explorer 6. The vulnerability arises from improper handling of componentFromPoint on XML objects that are uninitialized or deleted, enabling an attacker to execute arbitrary code via a crafted HTML page. Impact includes remote code execution with the attac...

CVE-2009-3943

CVE-2009-3943 affects Microsoft Internet Explorer 6 (up to build 6.0.2900.2180) and IE7 (up to 7.0.6000.16711). The vulnerability arises when a JavaScript loop configures the home page via the setHomePage method in conjunction with a DHTML behavior property, leading to a denial of service (applic...

CVE-2010-0652

CVE-2010-0652 affects Microsoft Internet Explorer. The issue: cross-origin loading of CSS stylesheets when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, enabling remote servers to obtain sensitive information via a crafted document. This description ...

CVE-2010-1258

CVE-2010-1258 arises from Internet Explorer 6–8 failing to determine the origin of script code, enabling a remote attacker to run script in a different domain/zone and potentially access user data. The primary entry is through crafted web content that exploits cross-domain context (Event Handler ...

CVE-2010-2119

The CVE-2010-2119 entry concerns Microsoft Internet Explorer 6.0.2900.2180, where JavaScript code that loops infinitely to create IFRAME elements for invalid nntp:// URIs can cause a denial of service through resource consumption. Connected sources corroborate a DoS condition in IE triggered by i...

CVE-2010-3342

CVE-2010-3342 affects Microsoft Internet Explorer 6–8, where the browser may render cached HTML content that comes from a different domain/zone via script, enabling cross-domain information disclosure. The issue is documented alongside CVE-2010-3348 (another cross-domain disclosure) and is mitiga...

CVE-2011-0347

This CVE (CVE-2011-0347) corresponds to a high-severity vulnerability in Microsoft Internet Explorer on Windows XP, involving an incorrect GUI display triggered via DOM-related vectors (cross_fuzz). The OpenVAS entries group this under a Windows Shell/IE flaw (MS11-006) with a CVSS v2 base score ...

CVE-2011-1962

Microsoft Internet Explorer 6–9 are affected by a Shift JIS character-encoding vulnerability where crafted pages can cause inactive filtering to leak content across domains or zones. This CVE (CVE-2011-1962) maps to a broader set of IE vulnerabilities addressed by MS11-057 (KB 2559049); the updat...

CVE-2013-3188

CVE-2013-3188 affects Microsoft Internet Explorer 8 and 9. The vulnerability allows remote code execution via a crafted web site due to memory corruption, enabling an attacker to run arbitrary code. The entry is coordinated with CVE-2013-3189 and is associated with MS13-059 (patch/mitigation). Af...

CVE-2014-1763

CVE-2014-1763 is a use-after-free vulnerability in Microsoft Internet Explorer 9–11 exploited via CSS handling (notably CSS @import) that could allow remote code execution. ZDI-14-217 documents a CSS memory corruption flaw in IE10/IE11/IE9, demonstrated by VUPEN during Pwn2Own 2014, with remote e...

CVE-2014-1780

The connected document provides concrete details for Internet Explorer memory corruption stemming from a use-after-free in IE 10/11 related to CVE-2014-1772 (not exactly CVE-2014-1780, but in the same family). It explains how memory corruption can be triggered by a crafted web page, enabling remo...

CVE-2014-2756

Technical details for CVE-2014-2756 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-2785

CVE-2014-2785 affects Microsoft Internet Explorer (notably IE7) where a crafted webpage can trigger remote code execution or memory corruption. Public exploitation activity is noted, and multiple sources attribute a memory‑corruption vulnerability enabling attacker code execution via specially cr...

CVE-2014-2809

CVE-2014-2809 affects Microsoft Internet Explorer 6–11 and is described as a memory corruption vulnerability in a crafted web site that can enable remote code execution or memory-based denial of service. The issue is one of several IE memory corruption vulnerabilities disclosed in MS14-037; the c...

CVE-2015-0053

CVE-2015-0053 affects Microsoft Internet Explorer 6–8, where memory corruption can be triggered by visiting a crafted web page, potentially enabling remote code execution or denial of service. This is part of the MS15-009 update set; the Nessus plugin notes IE variants and emphasizes that systems...

CVE-2015-2421

CVE-2015-2421 is a Microsoft Internet Explorer ASLR bypass affecting IE 6–11. The root cause is memory/ASLR handling allowing remote code execution via a crafted webpage. The issue is addressed by security update MS15-065, which covers IE vulnerabilities and requires applying the update for affec...

CVE-2015-2500

Microsoft Internet Explorer 7 and 8 are affected by CVE-2015-2500 via a crafted web page that triggers memory corruption, enabling remote code execution or a denial of service. The issue is addressed by the MS15-094 cumulative security update for Internet Explorer (covering IE 7–11 per multiple a...

CVE-2015-6074

Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-6074) affects IE 7–11. A crafted web site can trigger memory corruption, enabling remote code execution or a denial of service. Connected CNVD entries confirm this class of vulnerability but do not provide product-specific expl...

CVE-2016-0103

CVE-2016-0103 corresponds to a memory corruption remote code execution vulnerability in Microsoft Internet Explorer 11. Affected component: Internet Explorer 11 (Windows). Underlying issue: memory corruption triggered by visiting a crafted web site, enabling arbitrary code execution or denial of ...

CVE-2016-3292

CVE-2016-3292 is the Internet Explorer Elevation of Privilege vulnerability. The connected MS advisories (MS16-104, KB3185319, and related MSRC entries) confirm that Internet Explorer on affected Windows versions mishandles zone and integrity settings, enabling sandbox bypass via a crafted webpag...

CVE-1999-1093

The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...

CVE-2000-0400

The CVE-2000-0400 entry refers to the Microsoft Active Movie ActiveX Control in Internet Explorer 5, where the issue stems from shared code handling the Internet cache and file downloads (not the Active Movie control itself). Affected component is msdxm.ocx (ClassID {05589FA1-C356-11CE-BF01-00AA0...

CVE-2001-0727

Summary of CVE-2001-0727 (File Execution Vulnerability) : Internet Explorer 6.0 on Windows is affected by a vulnerability in MIME header handling (Content-Disposition and Content-Type). An attacker can cause code execution by modifying headers to disguise downloaded content as safe, potentially t...

CVE-2003-1328

The CVE concerns Microsoft Internet Explorer 5.01, 5.5, and 6.0, where the showHelp() function supports certain pluggable protocols that can bypass the cross‑domain security model and allow remote code execution. The OpenVAS entries reference the affected patches (MS03-004 and MS05-020) and indic...

CVE-2004-2704

HastyMail (PHP-based mail client) does not send the attachment parameter in the Content-Disposition header for attachments in versions ≤1.0.1 (stable) and ≤1.1 (development). This causes attachments to render inline in Internet Explorer when the download link is clicked, facilitating cross-site s...

CVE-2005-4827

CVE-2005-4827 affects Internet Explorer 6.0 (and possibly other versions). It describes a bypass of the same-origin policy by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) with a method name containing tab, newline, or carriage return characters, a pattern some proxies convert to s...

CVE-2006-3637

CVE-2006-3637 is an Internet Explorer remote code execution vulnerability in the HTML rendering path where certain layout combinations can corrupt memory. A crafted HTML file/page could allow a user-assisted remote attacker to execute arbitrary code with the caller’s privileges. Affected products...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier is affected by CVE-2006-7031 due to a flaw in mshtml.dll triggered by a table element with a CSS position attribute, allowing remote attackers to cause a denial of service (crash). The vulnerability is documented across multiple sources (NVD/CV...

CVE-2007-2291

The CVE-2007-2291 entry describes a CRLF (HTTP header) injection vulnerability in the Digest Authentication support of Microsoft Internet Explorer 7.0.5730.11. The flaw permits remote attackers to perform HTTP response splitting by injecting a line feed (%0a) into the username attribute, potentia...