CVE-2014-2756

Technical details for CVE-2014-2756 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-6347

Microsoft Internet Explorer 11 is affected by CVE-2014-6347 (Memory corruption) which can allow remote code execution via a crafted web page. The root cause involves memory corruption when handling certain objects in IE, enabling code execution in the context of the user. Public exploits exist; r...

CVE-2015-0046

CVE-2015-0046 targets Microsoft Internet Explorer 9–11. The associated Nessus plugin confirms an IE memory corruption vulnerability that can enable remote code execution via a crafted web page. The practical remediation is applying security updates: MS15-009 (Security Update 3034682). Full protec...

CVE-2015-0053

CVE-2015-0053 affects Microsoft Internet Explorer 6–8, where memory corruption can be triggered by visiting a crafted web page, potentially enabling remote code execution or denial of service. This is part of the MS15-009 update set; the Nessus plugin notes IE variants and emphasizes that systems...

CVE-2015-6157

CVE-2015-6157 is an information-disclosure vulnerability in Microsoft Internet Explorer 11. A crafted webpage can cause memory disclosure, allowing remote attackers to read sensitive process memory. Public exploitation is noted in related NASL plugin data for MS15-124 (IE updates), and multiple a...

CVE-2016-0068

CVE-2016-0068 affects Microsoft Internet Explorer 9–11. It describes a cross-domain policy bypass vulnerability that could allow remote attackers to bypass the Same Origin Policy via unspecified vectors, potentially enabling information access across domains. The related JVN entries indicate the ...

CVE-1999-1094

The vulnerability CVE-1999-1094 affects Internet Explorer 4.01 and earlier. A buffer overflow can be triggered by a long URL using the mk: protocol, enabling a remote attacker to execute arbitrary commands. According to the NVD entry, the attack vector is network, with low complexity and no authe...

CVE-1999-1577

CVE-1999-1577 describes a buffer overflow in the HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 used with Internet Explorer 4.01/5. The vulnerability allows remote attackers to execute arbitrary commands by passing long arguments to the OpenHelp method. The available sources confirm the vuln...

CVE-2001-0727

Summary of CVE-2001-0727 (File Execution Vulnerability) : Internet Explorer 6.0 on Windows is affected by a vulnerability in MIME header handling (Content-Disposition and Content-Type). An attacker can cause code execution by modifying headers to disguise downloaded content as safe, potentially t...

CVE-2001-1497

Microsoft Internet Explorer 4.0–6.0 has a local-privilege issue where an attacker can differentiate alphanumeric from non-alphanumeric password characters by using certain control-key navigation, potentially aiding brute-force guessing. The issue affects IE versions 4.0 through 6.0; CVSSv2 base s...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2004-0484

The CVE-2004-0484 entry concerns Microsoft Internet Explorer 6.0.2800, specifically the mshtml.dll component. A crafted HTML table containing a form that spans multiple td elements and references a CSS “float: left” class in a stylesheet link located after the table can trigger a null dereference...

CVE-2004-1155

The CVE-2004-1155 entry describes a window-injection flaw in multiple browsers where a malicious site can replace content in a popup window opened from a trusted site by referencing the popup’s known name across domains. Connected advisories (CPAI-2004-205) explain that the vulnerability arises f...

CVE-2004-2704

HastyMail (PHP-based mail client) does not send the attachment parameter in the Content-Disposition header for attachments in versions ≤1.0.1 (stable) and ≤1.1 (development). This causes attachments to render inline in Internet Explorer when the download link is clicked, facilitating cross-site s...

CVE-2007-2291

The CVE-2007-2291 entry describes a CRLF (HTTP header) injection vulnerability in the Digest Authentication support of Microsoft Internet Explorer 7.0.5730.11. The flaw permits remote attackers to perform HTTP response splitting by injecting a line feed (%0a) into the username attribute, potentia...

CVE-2007-3550

Microsoft Internet Explorer 6.0 and 7.0 are identified as affected. The vulnerability allows remote attackers to manipulate Zone settings by injecting certain metacharacters (e.g., wildcards) via JavaScript to fill Zones with arbitrary domains, leading to a denial of service through website suppr...

CVE-2008-2254

CVE-2008-2254 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 6/7 . The issue arises when IE accesses objects that are not properly initialized in HTML processing, leading to a crash or remote code execution within the user’s context. Multiple connected sources cor...

CVE-2008-2257

CVE-2008-2257 concerns memory corruption in Microsoft Internet Explorer 5.01/6/7 when handling a document object appended in a specific order, allowing remote code execution and DoS under memory corruption scenarios. Connected sources also reference CVE-2008-2258, described as a related memory-co...

CVE-2009-3943

CVE-2009-3943 affects Microsoft Internet Explorer 6 (up to build 6.0.2900.2180) and IE7 (up to 7.0.6000.16711). The vulnerability arises when a JavaScript loop configures the home page via the setHomePage method in conjunction with a DHTML behavior property, leading to a denial of service (applic...

CVE-2013-3871

CVE-2013-3871 corresponds to multiple remote code execution/memory corruption vulnerabilities in Microsoft Internet Explorer (IE) 6–10, triggered by viewing a crafted website. Connected sources (MS13-088) describe an in-memory object access flaw in IE that could allow code execution under the use...

CVE-2013-3874

CVE-2013-3874 affects Microsoft Internet Explorer 9. The vulnerability is a memory corruption flaw triggered by processing crafted web content, allowing remote attackers to execute arbitrary code or cause a denial of service. The issue is documented as part of MS13-080 and is addressed by the cum...

CVE-2013-4015

CVE-2013-4015 describes an elevation of privilege in Microsoft Internet Explorer 6–10 where local users could bypass protection mode checks (Protected Mode or Enhanced Protected Mode) by executing sandboxed code. The issue is documented in the IE sandbox bypass context and is covered by the MS13-...

CVE-2014-1774

Affected software: Microsoft Internet Explorer 9. The vulnerability is a memory corruption flaw in IE9 that can be triggered by a crafted web site, enabling remote code execution or a denial of service. This CVE is part of a set (CVE-2014-1774, -1788, -2754) describing memory corruption vulnerabi...

CVE-2014-2790

Microsoft Internet Explorer 11 has a memory corruption vulnerability (CVE-2014-2790) that could allow remote code execution or a denial of service when visiting a crafted web site. The issue affects IE 6–11, but the Core details point to IE 11, with the described impact requiring no user interact...

CVE-2014-2800

Microsoft Internet Explorer versions 6–11 are affected by memory corruption vulnerabilities identified as CVE-2014-2800 (and related CVEs 2807/2809). A crafted web site can trigger remote code execution or memory corruption, potentially allowing attacker-controlled actions. Public exploits exist ...

CVE-2014-2802

CVE-2014-2802 describes a memory‑corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by visiting a crafted website, allowing remote code execution or memory corruption. Public exploits exist for this vulnerability per OpenVAS, and affected products cover Internet Expl...

CVE-2015-1710

CVE-2015-1710 affects Microsoft Internet Explorer versions 6–11. The connected sources describe a memory corruption vulnerability exploitable via a crafted web page, enabling remote code execution or a denial of service. The CVE is explicitly distinguished from CVE-2015-1694. The available docume...

CVE-2015-2484

Microsoft Internet Explorer 10/11 contains a Tampering Vulnerability (CVE-2015-2484) caused by an incorrect file-system flag during certain accesses, enabling a remote attacker to delete arbitrary files via crafted web content. Public details indicate exploitation via user-assisted access to mali...

CVE-2016-0103

CVE-2016-0103 corresponds to a memory corruption remote code execution vulnerability in Microsoft Internet Explorer 11. Affected component: Internet Explorer 11 (Windows). Underlying issue: memory corruption triggered by visiting a crafted web site, enabling arbitrary code execution or denial of ...

CVE-2016-3276

CVE-2016-3276 affects Microsoft Internet Explorer 11 and Microsoft Edge. A remote attacker can trigger a content-spoofing attack by sending or hosting a specially crafted URL, potentially convincing users to visit a malicious page after user interaction (clicking the URL). Exploitation scenarios ...

CVE-1999-0487

The vulnerability CVE-1999-0487 affects the DHTML Edit ActiveX control (dhtmled.ocx) used by Internet Explorer. The control can read arbitrary local files, enabling an attacker to exfiltrate data through the browser. Concrete details confirm affected software and root cause: Internet Explorer wit...

CVE-1999-1235

CVE-1999-1235 affects Internet Explorer 5.0 and involves the browser recording FTP credentials in the URL history (index.dat) and exposing them via the status bar when hovering links. The underlying issue is that usernames/passwords are stored in client-side history data, enabling local users to ...

CVE-2001-0089

CVE-2001-0089 affects Internet Explorer 5.0–5.5. The vulnerability allows a remote attacker to read arbitrary files from the client through an HTML form using an INPUT TYPE element, known as the “File Upload via Form” issue. The provided documents do not specify payloads, affected configurations ...

CVE-2001-0875

CVE-2001-0875 affects Internet Explorer 5.01/5.5/6.0 where the file-download dialog can misrepresent the filename, potentially enabling remote code execution. OpenVAS details indicate the July 2004 IE Cumulative Patch (MS05-020) mitigates this, but it is not applied on the remote host in one list...

CVE-2002-0500

The CVE-2002-0500 entry describes a vulnerability in Internet Explorer 5.0–6.0 where a remote attacker can determine the existence of local files on a client by abusing an IMG tag with a dynsrc attribute that references the target file, causing the image object to reveal information such as file ...

CVE-2002-1714

CVE-2002-1714 affects Microsoft Internet Explorer 5.0 through 6.0. The issue arises when processing an object of type "text/html" where the DATA field identifies the HTML document containing the object, which may trigger infinite recursion and cause a denial of service (crash). NVD lists a CVSS v...

CVE-2002-2062

CVE-2002-2062 affects Internet Explorer 5.5/6.0 on Windows 2000 via the ftp.htt component when the user has “Enable folder view for FTP sites” and “Enable Web content in folders” enabled. The vulnerability is a cross-site scripting (XSS) issue where an attacker can inject arbitrary web script/HTM...

CVE-2004-0978

The CVE-2004-0978 issue is a heap-based buffer overflow in the Hrtbeat.ocx ActiveX control used by MSN/MSN Gaming sites on Internet Explorer 5.01–6. The vulnerability allows remote code execution via the SetupData parameter and arises in the ActiveX control’s handling of data during online gaming...

CVE-2004-2307

CVE-2004-2307 affects Microsoft Internet Explorer 6.0.2600 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (browser crash) by using a shell: URI with double backslashes (\) in an HTML tag (e.g., IFRAME or A). The connected documents confirm the attack vector ...

CVE-2005-1829

Microsoft Internet Explorer 6 SP2 is affected by CVE-2005-1829. The vulnerability allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other. The available sources describe the issue at a high level (DoS through crafted e...

CVE-2006-3200

CVE-2006-3200 affects Internet Explorer. Unspecified versions are vulnerable to a denial-of-service through an IFRAME with a src attribute containing a File:// URI followed by an 8-bit character, as described in the NVD/CVE records. The provided documents state the issue and do not specify a vend...

CVE-2006-3472

Microsoft Internet Explorer 6.0 and 6.0 SP1 is affected by a vulnerability that allows remote attackers to cause a denial of service via an HTML page containing an A tag with a long title attribute. The connected documents specify the affected software and the basic exploit vector, but do not pro...

CVE-2006-3637

CVE-2006-3637 is an Internet Explorer remote code execution vulnerability in the HTML rendering path where certain layout combinations can corrupt memory. A crafted HTML file/page could allow a user-assisted remote attacker to execute arbitrary code with the caller’s privileges. Affected products...

CVE-2006-3899

Microsoft Internet Explorer 6.0 on Windows XP SP2 is affected by CVE-2006-3899 due to the CEnroll.CEnroll.2 ActiveX object’s stringToBinary function: a long second argument triggers an invalid memory access in SysAllocStringLen, leading to remote DoS (application crash). This aligns with NVD deta...

CVE-2006-7029

CVE-2006-7029 affects Microsoft Internet Explorer 6 SP2 and earlier. A frameset with only one frame that calls resizeTo with specific arguments can trigger a remote denial of service (crash). The entry notes a possible relation to CVE-2006-3637, but the provided documents do not specify a patch v...

CVE-2007-2938

The CVE-2007-2938 entry affects the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) version 5.4.0.6. It describes a buffer overflow condition that, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to th...

CVE-2007-3497

Affected software: Microsoft Internet Explorer 7. Vulnerability: remote attackers can determine the existence of page history via the history.length JavaScript variable. Root cause/notes: description states the issue but does not specify a root cause in these documents. Impact: information disclo...

CVE-2007-5456

CVE-2007-5456 describes a vulnerability in Microsoft Internet Explorer 7 and earlier where an attacker can bypass the File Download - Security Warning dialog and cause a download of arbitrary files by appending a '?' and a non-.exe filename after the .exe filename. The connected advisories and NV...

CVE-2010-2119

The CVE-2010-2119 entry concerns Microsoft Internet Explorer 6.0.2900.2180, where JavaScript code that loops infinitely to create IFRAME elements for invalid nntp:// URIs can cause a denial of service through resource consumption. Connected sources corroborate a DoS condition in IE triggered by i...

CVE-2010-3348

Microsoft Internet Explorer 6–8 is affected by a Cross‑Domain Information Disclosure vulnerability (CVE-2010-3348) where cached content could be rendered as HTML, allowing access to content from a different domain or zone via script. The issue stems from IE not preventing rendering of cached cont...