CVE-2013-3140

This CVE (CVE-2013-3140) concerns a Use-After-Free in Microsoft Internet Explorer 9. The vulnerability is triggered by visiting a crafted webpage that accesses a deleted CMarkup object, enabling remote code execution. The issue is tied to IE9’s handling of CMarkup, and is documented as a high-sev...

CVE-2016-0068

CVE-2016-0068 affects Microsoft Internet Explorer 9–11. It describes a cross-domain policy bypass vulnerability that could allow remote attackers to bypass the Same Origin Policy via unspecified vectors, potentially enabling information access across domains. The related JVN entries indicate the ...

CVE-1999-0967

CVE-1999-0967 describes a buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. The connected PT-1997-1176 entry reiterates a buffer overflow in the HTML library with affected software and recommends updating to ...

CVE-1999-1093

The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...

CVE-1999-1472

This CVE (CVE-1999-1472) affects Internet Explorer 4.0. The vulnerability allows a remote attacker to read arbitrary text and HTML files on the user’s machine by delivering a small IFRAME that uses Dynamic HTML (DHTML) to exfiltrate data (the Freiburg text-viewing issue). The connected records co...

CVE-2000-0400

The CVE-2000-0400 entry refers to the Microsoft Active Movie ActiveX Control in Internet Explorer 5, where the issue stems from shared code handling the Internet cache and file downloads (not the Active Movie control itself). Affected component is msdxm.ocx (ClassID {05589FA1-C356-11CE-BF01-00AA0...

CVE-2002-0027

Affected software: Internet Explorer 5.5 and 6.0. Vulnerability: Frame Domain Verification bypass via Document.open between frames from different domains; allows a remote attacker to read files and spoof the URL in the address bar. Impact: reads files on target and can impersonate sites; variant ...

CVE-2002-1254

The vulnerability (CVE-2002-1254) affects Internet Explorer 5.5 and 6.0. Affected component: cross-domain verification via cached methods/objects. Root cause: security model bypass that allows remote attackers to access information on the local system or in other domains, and potentially execute ...

CVE-2002-1670

CVE-2002-1670 concerns Microsoft Windows XP Professional upgrade edition where applying an upgrade overwrites already installed Internet Explorer 6.0 patches, resulting in Internet Explorer being left unpatched. The connected sources reiterate this description without adding concrete exploit deta...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2004-0484

The CVE-2004-0484 entry concerns Microsoft Internet Explorer 6.0.2800, specifically the mshtml.dll component. A crafted HTML table containing a form that spans multiple td elements and references a CSS “float: left” class in a stylesheet link located after the table can trigger a null dereference...

CVE-2004-2704

HastyMail (PHP-based mail client) does not send the attachment parameter in the Content-Disposition header for attachments in versions ≤1.0.1 (stable) and ≤1.1 (development). This causes attachments to render inline in Internet Explorer when the download link is clicked, facilitating cross-site s...

CVE-2005-2274

The connected sources confirm CVE-2005-2274 affects Microsoft Internet Explorer 6.0 and describes a dialog-origin spoofing vulnerability where a JavaScript dialog box may not be clearly tied to the page that generated it, enabling an attacker to impersonate a trusted site and facilitate phishing....

CVE-2006-3472

Microsoft Internet Explorer 6.0 and 6.0 SP1 is affected by a vulnerability that allows remote attackers to cause a denial of service via an HTML page containing an A tag with a long title attribute. The connected documents specify the affected software and the basic exploit vector, but do not pro...

CVE-2009-3943

CVE-2009-3943 affects Microsoft Internet Explorer 6 (up to build 6.0.2900.2180) and IE7 (up to 7.0.6000.16711). The vulnerability arises when a JavaScript loop configures the home page via the setHomePage method in conjunction with a DHTML behavior property, leading to a denial of service (applic...

CVE-2010-2119

The CVE-2010-2119 entry concerns Microsoft Internet Explorer 6.0.2900.2180, where JavaScript code that loops infinitely to create IFRAME elements for invalid nntp:// URIs can cause a denial of service through resource consumption. Connected sources corroborate a DoS condition in IE triggered by i...

CVE-2013-3162

CVE-2013-3162 affects Internet Explorer 7–10. The vulnerability is a memory corruption issue triggered by a crafted web site, leading to remote code execution or memory corruption denial of service. It is part of a set of IE memory corruption vulnerabilities; the related entry CVE-2013-3115 cover...

CVE-2013-3201

Microsoft Internet Explorer 9–10 memory corruption vulnerability (CVE-2013-3201/3203/3206/3207/3209) can allow remote code execution or memory corruption via a crafted web site. Seebug entries for CVE-2013-3201/3207 describe exploitation across IE versions 6–10 with remote code execution in the c...

CVE-2014-0280

CVE-2014-0280 maps to a memory-corruption vulnerability in Microsoft Internet Explorer (IE) with remote code execution and denial-of-service potential via a crafted web site. The CVE record specifies IE 6–8 as affected. Public exploitation is reported, and malware/exploits exist for this issue. T...

CVE-2014-1790

Microsoft Internet Explorer 10 is affected by CVE-2014-1790, a memory-corruption vulnerability that can be triggered by a crafted web site, enabling remote code execution or memory-corruption DoS. Root cause: memory corruption in IE10. Mitigation: apply MS14-035 Security Update for Internet Explo...

CVE-2014-2756

Technical details for CVE-2014-2756 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-2790

Microsoft Internet Explorer 11 has a memory corruption vulnerability (CVE-2014-2790) that could allow remote code execution or a denial of service when visiting a crafted web site. The issue affects IE 6–11, but the Core details point to IE 11, with the described impact requiring no user interact...

CVE-2014-2800

Microsoft Internet Explorer versions 6–11 are affected by memory corruption vulnerabilities identified as CVE-2014-2800 (and related CVEs 2807/2809). A crafted web site can trigger remote code execution or memory corruption, potentially allowing attacker-controlled actions. Public exploits exist ...

CVE-2014-2802

CVE-2014-2802 describes a memory‑corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by visiting a crafted website, allowing remote code execution or memory corruption. Public exploits exist for this vulnerability per OpenVAS, and affected products cover Internet Expl...

CVE-2015-1710

CVE-2015-1710 affects Microsoft Internet Explorer versions 6–11. The connected sources describe a memory corruption vulnerability exploitable via a crafted web page, enabling remote code execution or a denial of service. The CVE is explicitly distinguished from CVE-2015-1694. The available docume...

CVE-2015-2484

Microsoft Internet Explorer 10/11 contains a Tampering Vulnerability (CVE-2015-2484) caused by an incorrect file-system flag during certain accesses, enabling a remote attacker to delete arbitrary files via crafted web content. Public details indicate exploitation via user-assisted access to mali...

CVE-2015-6080

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability that enables remote code execution or a denial of service when loading a crafted web site. The advisory notes this is a separate issue from related CVEs (e.g., 2015-6068/6072/6073/etc.). Exploitation details are not p...

CVE-2015-6081

CVE-2015-6081 affects Microsoft Internet Explorer 8–11 and is a memory-corruption vulnerability that allows remote code execution or a denial of service when a user visits a crafted site. The connected CNVD entries corroborate a memory- corruption flaw in IE8–11 triggered by crafted web content. ...

CVE-2016-3276

CVE-2016-3276 affects Microsoft Internet Explorer 11 and Microsoft Edge. A remote attacker can trigger a content-spoofing attack by sending or hosting a specially crafted URL, potentially convincing users to visit a malicious page after user interaction (clicking the URL). Exploitation scenarios ...

CVE-1999-0487

The vulnerability CVE-1999-0487 affects the DHTML Edit ActiveX control (dhtmled.ocx) used by Internet Explorer. The control can read arbitrary local files, enabling an attacker to exfiltrate data through the browser. Concrete details confirm affected software and root cause: Internet Explorer wit...

CVE-1999-1094

The vulnerability CVE-1999-1094 affects Internet Explorer 4.01 and earlier. A buffer overflow can be triggered by a long URL using the mk: protocol, enabling a remote attacker to execute arbitrary commands. According to the NVD entry, the attack vector is network, with low complexity and no authe...

CVE-1999-1577

CVE-1999-1577 describes a buffer overflow in the HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 used with Internet Explorer 4.01/5. The vulnerability allows remote attackers to execute arbitrary commands by passing long arguments to the OpenHelp method. The available sources confirm the vuln...

CVE-2001-0727

Summary of CVE-2001-0727 (File Execution Vulnerability) : Internet Explorer 6.0 on Windows is affected by a vulnerability in MIME header handling (Content-Disposition and Content-Type). An attacker can cause code execution by modifying headers to disguise downloaded content as safe, potentially t...

CVE-2001-1497

Microsoft Internet Explorer 4.0–6.0 has a local-privilege issue where an attacker can differentiate alphanumeric from non-alphanumeric password characters by using certain control-key navigation, potentially aiding brute-force guessing. The issue affects IE versions 4.0 through 6.0; CVSSv2 base s...

CVE-2002-2062

CVE-2002-2062 affects Internet Explorer 5.5/6.0 on Windows 2000 via the ftp.htt component when the user has “Enable folder view for FTP sites” and “Enable Web content in folders” enabled. The vulnerability is a cross-site scripting (XSS) issue where an attacker can inject arbitrary web script/HTM...

CVE-2004-0978

The CVE-2004-0978 issue is a heap-based buffer overflow in the Hrtbeat.ocx ActiveX control used by MSN/MSN Gaming sites on Internet Explorer 5.01–6. The vulnerability allows remote code execution via the SetupData parameter and arises in the ActiveX control’s handling of data during online gaming...

CVE-2004-1155

The CVE-2004-1155 entry describes a window-injection flaw in multiple browsers where a malicious site can replace content in a popup window opened from a trusted site by referencing the popup’s known name across domains. Connected advisories (CPAI-2004-205) explain that the vulnerability arises f...

CVE-2006-3200

CVE-2006-3200 affects Internet Explorer. Unspecified versions are vulnerable to a denial-of-service through an IFRAME with a src attribute containing a File:// URI followed by an 8-bit character, as described in the NVD/CVE records. The provided documents state the issue and do not specify a vend...

CVE-2006-3899

Microsoft Internet Explorer 6.0 on Windows XP SP2 is affected by CVE-2006-3899 due to the CEnroll.CEnroll.2 ActiveX object’s stringToBinary function: a long second argument triggers an invalid memory access in SysAllocStringLen, leading to remote DoS (application crash). This aligns with NVD deta...

CVE-2006-7029

CVE-2006-7029 affects Microsoft Internet Explorer 6 SP2 and earlier. A frameset with only one frame that calls resizeTo with specific arguments can trigger a remote denial of service (crash). The entry notes a possible relation to CVE-2006-3637, but the provided documents do not specify a patch v...

CVE-2007-2291

The CVE-2007-2291 entry describes a CRLF (HTTP header) injection vulnerability in the Digest Authentication support of Microsoft Internet Explorer 7.0.5730.11. The flaw permits remote attackers to perform HTTP response splitting by injecting a line feed (%0a) into the username attribute, potentia...

CVE-2007-3497

Affected software: Microsoft Internet Explorer 7. Vulnerability: remote attackers can determine the existence of page history via the history.length JavaScript variable. Root cause/notes: description states the issue but does not specify a root cause in these documents. Impact: information disclo...

CVE-2007-3550

Microsoft Internet Explorer 6.0 and 7.0 are identified as affected. The vulnerability allows remote attackers to manipulate Zone settings by injecting certain metacharacters (e.g., wildcards) via JavaScript to fill Zones with arbitrary domains, leading to a denial of service through website suppr...

CVE-2008-4788

Microsoft Internet Explorer 6 is affected by CVE-2008-4788 due to a flaw in how the address bar renders URLs with high-bit characters. The vulnerability occurs when IE omits high-bit URL-encoded characters in the address bar, enabling remote attackers to spoof the address bar by using a domain na...

CVE-2010-3348

Microsoft Internet Explorer 6–8 is affected by a Cross‑Domain Information Disclosure vulnerability (CVE-2010-3348) where cached content could be rendered as HTML, allowing access to content from a different domain or zone via script. The issue stems from IE not preventing rendering of cached cont...

CVE-2013-3909

CVE-2013-3909 affects Microsoft Internet Explorer 6–8. An attacker can read content from a different domain/zone via crafted CSS token sequences, enabling remote information disclosure. The issue is addressed by Microsoft Security Bulletin MS13-088 and corresponding patches. The vulnerability sch...

CVE-2013-3915

CVE-2013-3915/3917 describe memory corruption and remote code execution in Microsoft Internet Explorer (IE) versions 6–11 triggered by a crafted web site. The two CVEs refer to an IE memory corruption issue with high impact (remote code execution/DoS) and are tied to MS13-088 (Cumulative Security...

CVE-2014-1774

Affected software: Microsoft Internet Explorer 9. The vulnerability is a memory corruption flaw in IE9 that can be triggered by a crafted web site, enabling remote code execution or a denial of service. This CVE is part of a set (CVE-2014-1774, -1788, -2754) describing memory corruption vulnerabi...

CVE-2014-1788

CVE-2014-1788 affects Microsoft Internet Explorer 9 and is described as a memory corruption vulnerability that can be triggered by visiting a crafted web site, potentially allowing remote code execution or denial of service. The connected records corroborate a family of IE9 memory corruption issu...

CVE-2014-2757

CVE-2014-2757 concerns memory corruption in Microsoft Internet Explorer (IE6–IE11) triggered by a crafted web page, enabling remote code execution or memory corruption. The connected document set discusses a broader category of IE memory corruption/UAF issues and references MS14-035 (CVE-2014-028...