CVE-2002-1185

CVE-2002-1185 affects Internet Explorer 5.01–6.0. The issue is a parsing flaw where PNG parameters are not properly checked when opening a PNG file, enabling a remote attacker to trigger a heap-based buffer overflow during decompression and cause a denial of service (crash). The connected documen...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2004-0484

The CVE-2004-0484 entry concerns Microsoft Internet Explorer 6.0.2800, specifically the mshtml.dll component. A crafted HTML table containing a form that spans multiple td elements and references a CSS “float: left” class in a stylesheet link located after the table can trigger a null dereference...

CVE-2006-3450

CVE-2006-3450 corresponds to a memory-corruption vulnerability in Microsoft Internet Explorer (IE6/IE5 SP4) involving HTML layout and certain layout-positioning combinations. The root cause is improper handling of CSS/class-related content (e.g., document.getElementByID usage) which could allow r...

CVE-2006-3897

CVE-2006-3897 describes a stack overflow in Microsoft Internet Explorer 6 on Windows 2000 caused by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with an overly long dispValue property. This leads to a remote-denial-of-service condition (application crash). Connected documents confi...

CVE-2006-3898

CVE-2006-3898 affects Microsoft Internet Explorer 6.0 on Windows XP SP2 via the Internet.HHCtrl.1 ActiveX object. According to the connected advisory CPAI-2006-104, the flaw is a heap overflow in hhctrl.ocx that can be triggered by a user visiting a crafted page, causing the browser to crash (den...

CVE-2006-5581

CVE-2006-5581 concerns Microsoft Internet Explorer 6, where parsing certain DHTML script function calls leads to memory corruption via incorrectly created elements. Exploitation requires the user to view a malicious page, enabling remote code execution on vulnerable IE 6 clients. The vulnerabilit...

CVE-2007-2938

The CVE-2007-2938 entry affects the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) version 5.4.0.6. It describes a buffer overflow condition that, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to th...

CVE-2008-3475

CVE-2008-3475 affects Microsoft Internet Explorer 6. The vulnerability arises from improper handling of componentFromPoint on XML objects that are uninitialized or deleted, enabling an attacker to execute arbitrary code via a crafted HTML page. Impact includes remote code execution with the attac...

CVE-2013-2557

The CVE targets Microsoft Internet Explorer 9’s sandbox protection mechanism. A memory corruption vulnerability could allow remote attackers to cause a denial of service or other unspecified impact via unknown vectors, demonstrated against Flash in Pwn2Own/CanSecWest 2013. Affected component: IE9...

CVE-2013-3162

CVE-2013-3162 affects Internet Explorer 7–10. The vulnerability is a memory corruption issue triggered by a crafted web site, leading to remote code execution or memory corruption denial of service. It is part of a set of IE memory corruption vulnerabilities; the related entry CVE-2013-3115 cover...

CVE-2013-3201

Microsoft Internet Explorer 9–10 memory corruption vulnerability (CVE-2013-3201/3203/3206/3207/3209) can allow remote code execution or memory corruption via a crafted web site. Seebug entries for CVE-2013-3201/3207 describe exploitation across IE versions 6–10 with remote code execution in the c...

CVE-2013-3872

CVE-2013-3882 (Microsoft Internet Explorer 10) is described in the provided sources as a memory-corruption vulnerability that allows remote code execution or a denial of service via a crafted web site. The NVD entry for CVE-2013-3882 notes it as a distinct vulnerability from CVE-2013-3872, CVE-20...

CVE-2013-3874

CVE-2013-3874 affects Microsoft Internet Explorer 9. The vulnerability is a memory corruption flaw triggered by processing crafted web content, allowing remote attackers to execute arbitrary code or cause a denial of service. The issue is documented as part of MS13-080 and is addressed by the cum...

CVE-2013-4015

CVE-2013-4015 describes an elevation of privilege in Microsoft Internet Explorer 6–10 where local users could bypass protection mode checks (Protected Mode or Enhanced Protected Mode) by executing sandboxed code. The issue is documented in the IE sandbox bypass context and is covered by the MS13-...

CVE-2014-0304

Microsoft Internet Explorer 11 is affected by CVE-2014-0304 (Memory Corruption). The vulnerability allows remote code execution or denial of service via a crafted web page due to memory object access. Mitigation provided by the vendor through MS14-012 (Cumulative Security Update for Internet Expl...

CVE-2014-1769

Technical details for CVE-2014-1769 are not publicly available in the provided documents; monitor for updates.

CVE-2014-1774

Affected software: Microsoft Internet Explorer 9. The vulnerability is a memory corruption flaw in IE9 that can be triggered by a crafted web site, enabling remote code execution or a denial of service. This CVE is part of a set (CVE-2014-1774, -1788, -2754) describing memory corruption vulnerabi...

CVE-2014-2764

CVE-2014-2764 (Internet Explorer memory corruption) is linked to IE 10/11 memory-use issues. Connected analysis outlines a use-after-free/memory-corruption root cause with a Microsoft patch (MS14-035) addressing the issue; POC details and exploitation context are discussed. No definitive product/...

CVE-2014-2790

Microsoft Internet Explorer 11 has a memory corruption vulnerability (CVE-2014-2790) that could allow remote code execution or a denial of service when visiting a crafted web site. The issue affects IE 6–11, but the Core details point to IE 11, with the described impact requiring no user interact...

CVE-2014-4099

CVE-2014-4099 in Microsoft Internet Explorer (IE) 9–11 is linked to a remote code execution vulnerability arising from out-of-bounds indexing of CCanvasRadialGradient objects in IE. The flaw enables an attacker to run arbitrary code when a user visits a crafted page or file, with the attack requi...

CVE-2015-6147

Microsoft Internet Explorer 8 and 9 are affected by CVE-2015-6147, a memory corruption vulnerability triggered by visiting a crafted web site. The CNVD entries describe memory corruption when IE fails to properly access objects in memory, potentially allowing remote code execution or memory corru...

CVE-2016-0069

CVE-2016-0069 corresponds to Internet Explorer cross-domain policy bypass (Same Origin Policy bypass) affecting IE 9–11. Connected sources indicate the flaw enables information disclosure via cross-domain policy bypass, with MS16-009 addressing the issue. The vulnerability is described as an elev...

CVE-1999-0487

The vulnerability CVE-1999-0487 affects the DHTML Edit ActiveX control (dhtmled.ocx) used by Internet Explorer. The control can read arbitrary local files, enabling an attacker to exfiltrate data through the browser. Concrete details confirm affected software and root cause: Internet Explorer wit...

CVE-1999-0488

CVE-1999-0488 affects Internet Explorer 4.0 and 5.0. The vulnerability is a variant of the “cross frame” issue that allows a remote attacker to execute security scripts in a different security context via malicious URLs. The description indicates this is a remote code execution-style weakness thr...

CVE-1999-1094

The vulnerability CVE-1999-1094 affects Internet Explorer 4.01 and earlier. A buffer overflow can be triggered by a long URL using the mk: protocol, enabling a remote attacker to execute arbitrary commands. According to the NVD entry, the attack vector is network, with low complexity and no authe...

CVE-1999-1235

CVE-1999-1235 affects Internet Explorer 5.0 and involves the browser recording FTP credentials in the URL history (index.dat) and exposing them via the status bar when hovering links. The underlying issue is that usernames/passwords are stored in client-side history data, enabling local users to ...

CVE-1999-1577

CVE-1999-1577 describes a buffer overflow in the HHOpen ActiveX control (hhopen.ocx) version 1.0.0.1 used with Internet Explorer 4.01/5. The vulnerability allows remote attackers to execute arbitrary commands by passing long arguments to the OpenHelp method. The available sources confirm the vuln...

CVE-2001-0089

CVE-2001-0089 affects Internet Explorer 5.0–5.5. The vulnerability allows a remote attacker to read arbitrary files from the client through an HTML form using an INPUT TYPE element, known as the “File Upload via Form” issue. The provided documents do not specify payloads, affected configurations ...

CVE-2001-0667

CVE-2001-0667 affects Internet Explorer 6 and earlier when used with the Telnet client in Services for Unix (SFU) 2.0. The vulnerability allows remote attackers to spawn Telnet with a log-file option on the command line, enabling writing arbitrary code into an executable file that is later execut...

CVE-2001-0807

The provided records indicate CVE-2001-0807 affects Internet Explorer 5.0 (and possibly other versions). The vulnerability allows a remote attacker from a malicious web page to read known text files from a client’s hard drive by using a SCRIPT tag with a SRC attribute that points to the local tex...

CVE-2002-0500

The CVE-2002-0500 entry describes a vulnerability in Internet Explorer 5.0–6.0 where a remote attacker can determine the existence of local files on a client by abusing an IMG tag with a dynsrc attribute that references the target file, causing the image object to reveal information such as file ...

CVE-2002-0722

Microsoft Internet Explorer versions 5.01, 5.5, and 6.0 are affected by CVE-2002-0722 due to a UI spoof flaw in the File Download dialogue that allows remote attackers to misrepresent a file’s origin and mislead users into trusting unsafe downloads. The vulnerability has a CVSS-based high impact ...

CVE-2002-1254

The vulnerability (CVE-2002-1254) affects Internet Explorer 5.5 and 6.0. Affected component: cross-domain verification via cached methods/objects. Root cause: security model bypass that allows remote attackers to access information on the local system or in other domains, and potentially execute ...

CVE-2004-2307

CVE-2004-2307 affects Microsoft Internet Explorer 6.0.2600 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (browser crash) by using a shell: URI with double backslashes (\) in an HTML tag (e.g., IFRAME or A). The connected documents confirm the attack vector ...

CVE-2005-3240

CVE-2005-3240 is described as a race condition in Microsoft Internet Explorer where a user-assisted drag-and-drop action could overwrite files or possibly execute code. The connected CVE-3840 records indicate this SQL injection entry is a duplicate/typo and that the correct identifier is CVE-2005...

CVE-2006-2056

CVE-2006-2056 affects Internet Explorer 6 on Windows XP SP2. The vuln is an argument-injection flaw where an attacker can influence command line arguments passed to a launched mail client via double-quote characters in a mailto: handler, demonstrated by starting Outlook with an arbitrary attachme...

CVE-2006-2382

CVE-2006-2382 (HTML Decoding Memory Corruption Vulnerability) affects Microsoft Internet Explorer 5.01 SP4, 6 SP1 and earlier. It is a heap-based memory corruption flaw in decoding UTF-8 HTML, caused by a miscalculation of memory sizes when translating UTF-8 characters to Unicode, which could all...

CVE-2007-3497

Affected software: Microsoft Internet Explorer 7. Vulnerability: remote attackers can determine the existence of page history via the history.length JavaScript variable. Root cause/notes: description states the issue but does not specify a root cause in these documents. Impact: information disclo...

CVE-2007-3550

Microsoft Internet Explorer 6.0 and 7.0 are identified as affected. The vulnerability allows remote attackers to manipulate Zone settings by injecting certain metacharacters (e.g., wildcards) via JavaScript to fill Zones with arbitrary domains, leading to a denial of service through website suppr...

CVE-2007-4848

CVE-2007-4848 affects Microsoft Internet Explorer 4.0–7. The issue allows remote attackers to determine whether local files have associated images by using a res:// URI in the src property of a JavaScript Image object, demonstrated with bitmap data inside a (1) .exe or (2) .dll file. The connecte...

CVE-2010-3348

Microsoft Internet Explorer 6–8 is affected by a Cross‑Domain Information Disclosure vulnerability (CVE-2010-3348) where cached content could be rendered as HTML, allowing access to content from a different domain or zone via script. The issue stems from IE not preventing rendering of cached cont...

CVE-2012-1882

CVE-2012-1882 affects Microsoft Internet Explorer 6–9. The vulnerability arises because IE does not block cross-domain scrolling events, allowing a crafted web site to read content from a different domain or zone (information disclosure). The OpenVAS/Nessus references associate this CVE with MS12...

CVE-2013-3915

CVE-2013-3915/3917 describe memory corruption and remote code execution in Microsoft Internet Explorer (IE) versions 6–11 triggered by a crafted web site. The two CVEs refer to an IE memory corruption issue with high impact (remote code execution/DoS) and are tied to MS13-088 (Cumulative Security...

CVE-2014-0280

CVE-2014-0280 maps to a memory-corruption vulnerability in Microsoft Internet Explorer (IE) with remote code execution and denial-of-service potential via a crafted web site. The CVE record specifies IE 6–8 as affected. Public exploitation is reported, and malware/exploits exist for this issue. T...

CVE-2014-1788

CVE-2014-1788 affects Microsoft Internet Explorer 9 and is described as a memory corruption vulnerability that can be triggered by visiting a crafted web site, potentially allowing remote code execution or denial of service. The connected records corroborate a family of IE9 memory corruption issu...

CVE-2014-2755

CVE-2014-2755 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site. The Connected document for CVE-2014-1785 indicates this family of vulnerabilities (Internet Explorer Memory Corruption) has been exploited (Exploits listed on Exploit-DB) and is associated with IE11. T...

CVE-2014-2757

CVE-2014-2757 concerns memory corruption in Microsoft Internet Explorer (IE6–IE11) triggered by a crafted web page, enabling remote code execution or memory corruption. The connected document set discusses a broader category of IE memory corruption/UAF issues and references MS14-035 (CVE-2014-028...

CVE-2014-2803

CVE-2014-2803 affects Microsoft Internet Explorer (IE) versions 8–10, where memory corruption can be triggered by visiting a crafted page, enabling remote code execution or memory corruption-based denial of service. Connected sources confirm IE memory corruption vulnerabilities with remote exploi...

CVE-2015-6072

Technical details for CVE-2015-6072 are not publicly available in the provided documents. The connected sources discuss memory corruption vulnerabilities in Internet Explorer/Edge in general but do not specify this CVE's affected versions or fixes. Monitor for updates.