CVE-2012-4775

Microsoft Internet Explorer 9 is affected by CVE-2012-4775 (CTreeNode Use After Free Vulnerability). The issue is a use-after-free in IE’s memory handling when accessing objects that were not properly initialized or already deleted (CTreeNode/CTreePos/CTreeNode-related code paths), leading to pot...

CVE-2013-3914

CVE-2013-3914 affects Microsoft Internet Explorer 9–11. Description confirms memory corruption that enables remote code execution or memory corruption Denial of Service via a crafted site. Root cause: memory corruption in IE’s handling of certain objects/files, leading to code execution in the co...

CVE-2013-5046

Technical details about CVE-2013-5046 (affected products, root cause, impact, fixes) are not publicly disclosed in the provided Connected Documents. Please monitor for updates from official advisories.

CVE-2014-0304

Microsoft Internet Explorer 11 is affected by CVE-2014-0304 (Memory Corruption). The vulnerability allows remote code execution or denial of service via a crafted web page due to memory object access. Mitigation provided by the vendor through MS14-012 (Cumulative Security Update for Internet Expl...

CVE-2014-2755

CVE-2014-2755 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site. The Connected document for CVE-2014-1785 indicates this family of vulnerabilities (Internet Explorer Memory Corruption) has been exploited (Exploits listed on Exploit-DB) and is associated with IE11. T...

CVE-2014-2777

Microsoft Internet Explorer CVE-2014-2777 (affecting IE8–IE11) is described as an Elevation of Privilege vulnerability allowing remote code execution via unspecified vectors, leading to increased privileges for web-scripted attacks. Connected sources corroborate that IE versions 8–11 were affecte...

CVE-2014-2807

Affected software: Microsoft Internet Explorer 6–11. Vulnerability: memory corruption in the browser via a crafted web site (Internet Explorer Memory Corruption Vulnerability). Impact: remote code execution or denial of service; exploitation can lead to arbitrary code execution. Exploitation stat...

CVE-2014-4096

The connected advisories describe remote code execution and memory corruption in Microsoft Internet Explorer 11 through crafted pages, with concrete technical details such as use-after-free and uninitialized memory (e.g., CBackgroundCollection, CHTMLEditorProxy, CAttrValue) leading to arbitrary c...

CVE-2015-6156

CVE-2015-6156 refers to a memory corruption vulnerability in Microsoft Internet Explorer 9–11 (and related browser components) that could be triggered by visiting a crafted website. The issue allows remote attackers to potentially execute arbitrary code or cause a denial of service, and is noted ...

CVE-1999-0488

CVE-1999-0488 affects Internet Explorer 4.0 and 5.0. The vulnerability is a variant of the “cross frame” issue that allows a remote attacker to execute security scripts in a different security context via malicious URLs. The description indicates this is a remote code execution-style weakness thr...

CVE-1999-0670

CVE-1999-0670 documents a buffer overflow in the Eyedog ActiveX control that allows a remote attacker to execute arbitrary commands. This is corroborated by multiple connected entries (NVD, CVE List, Red Hat, EUVD). The exact vulnerable versions, affected products, exploit details, and remediatio...

CVE-1999-0869

The vulnerability (CVE-1999-0869) affects Internet Explorer 3.x to 4.01. It allows a remote attacker to insert malicious content into a frame of another web site (frame spoofing). No remediation or exploitation details are provided in the connected documents.

CVE-2000-0439

Vulnerability: Internet Explorer 4.0/5.0. Issue: malicious site can obtain cookies from another domain by embedding that domain name with escaped characters in a URL (Unauthorized Cookie Access). Root cause: cross-domain cookie access via crafted URL. Impact: potential leakage of cookies across d...

CVE-2000-0596

Summary: The CVE-2000-0596 issue involves Internet Explorer (IE 5.x/IE 5.01) opening Microsoft Access database/project files via HTML OBJECT tags without warning, enabling remote code execution via embedded VBA/macro. Affected components: IE’s handling of OBJECT tags referencing Access file types...

CVE-2001-0002

Affected software: Internet Explorer 5.5 and earlier.What’s vulnerable: how IE handles cached content in the Local Computer Zone and execution via .chm files, enabling remote code execution.Impact: remote attacker could run arbitrary code on the affected host.Remediation: apply the relevant cumul...

CVE-2002-0024

CVE-2002-0024 affects Internet Explorer 5.01, 5.5 and 6.0. The issue allows an attacker to abuse Content-Disposition and Content-Type HTML headers to alter how a downloaded file’s name is displayed, potentially deceiving users into opening unsafe files. Exploitation details are not provided in th...

CVE-2002-0026

IE 5.5/6.0 remote code execution via an object handling asynchronous events after initial security checks. Exploitation would bypass scripting restrictions, enabling arbitrary script execution. Remediation notes in connected docs point to Microsoft MS02-005 (and MS05-020) patches; OpenVAS entries...

CVE-2002-0188

Affected software: Microsoft Internet Explorer 5.01 and 6.0. The vulnerability arises from incorrect handling of Content-Disposition and Content-Type header fields, causing the spoofed file type to be passed to the OS for handling instead of triggering an error. This can enable remote code execut...

CVE-2002-0242

The CVE-2002-0242 entry concerns Internet Explorer 6 and describes a cross-site scripting vulnerability where output from a remote server via an Extended HTML Form is not properly cleansed, allowing remote script execution. Affected component: Internet Explorer 6 (Extended HTML Form handling). Ro...

CVE-2004-1173

Internet Explorer 6 contains a vulnerability where remote attackers can bypass the popup blocker using DOM methods in the DHTML Editing Component (DEC) and showModalDialog calls. Root cause: the DHTML Editing Component/DEC enables a bypass via its DOM API. Impact described as bypassing the popup ...

CVE-2004-2307

CVE-2004-2307 affects Microsoft Internet Explorer 6.0.2600 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (browser crash) by using a shell: URI with double backslashes (\) in an HTML tag (e.g., IFRAME or A). The connected documents confirm the attack vector ...

CVE-2004-2476

The vulnerability CVE-2004-2476 affects Microsoft Internet Explorer 6.0. A remote attacker can induce a denial-of-service by embedding an IFRAME whose source is the character "?"; this leads to an infinite loop and browser crash. The available documents confirm the affected product and the failur...

CVE-2005-0954

CVE-2005-0954 affects Windows 2000 SP1, specifically Windows Explorer and Internet Explorer, where a malformed Windows Metafile (WMF) can be used by a remote attacker to consume CPU and cause a denial of service. The vulnerability is described as enabling a remote DoS via WMF parsing, with the NV...

CVE-2005-3240

CVE-2005-3240 is described as a race condition in Microsoft Internet Explorer where a user-assisted drag-and-drop action could overwrite files or possibly execute code. The connected CVE-3840 records indicate this SQL injection entry is a duplicate/typo and that the correct identifier is CVE-2005...

CVE-2005-4810

Microsoft Internet Explorer 7.0 Beta3 and earlier is affected. The vulnerability arises when a remote attacker exploits an XMLHttpRequest response that contains a text/html Content-Type header, causing the browser to crash and leading to a denial of service. The documented impact is a crash; no o...

CVE-2006-2056

CVE-2006-2056 affects Internet Explorer 6 on Windows XP SP2. The vuln is an argument-injection flaw where an attacker can influence command line arguments passed to a launched mail client via double-quote characters in a mailto: handler, demonstrated by starting Outlook with an arbitrary attachme...

CVE-2006-2384

CVE-2006-2384 corresponds to Internet Explorer address bar spoofing: IE 5.01 SP4, 6 SP1 and earlier can display a trusted UI while navigating to a malicious site, enabling phishing-like spoofing. The vulnerability arises from a method that preserves the address bar/trust UI after navigation. Micr...

CVE-2006-3729

CVE-2006-3729 affects DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed. A large negative integer argument to getDataMemberName in OWC11.DataSourceControl.11 can cause an integer overflow and a null dereference, leading to a denial of service (crash). The NVD notes ...

CVE-2007-2938

The CVE-2007-2938 entry affects the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) version 5.4.0.6. It describes a buffer overflow condition that, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to th...

CVE-2007-4227

Microsoft Windows Explorer (explorer.exe) is affected by CVE-2007-4227, a user-assisted DoS vulnerability triggered by processing a crafted image file (e.g., something.jpg). The connected documents also reference CVE-2007-3958 (GIF file) as related, indicating a similar DoS vector in explorer.exe...

CVE-2009-3267

The CVE-2009-3267 entry covers Internet Explorer (IE) versions 6 (6.0.2900.2180) and 7 (7.0.6000.16711). The vulnerability is a denial of service caused by processing an automatically submitted form containing a KEYGEN element, leading to CPU consumption. The connected OpenVAS entries corroborate...

CVE-2011-1964

CVE-2011-1964 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 6–9 related to STYLE object handling, allowing remote code execution when visiting a crafted page. Connected sources confirm the affected product (IE), nature (STYLE object memory corruption), and the ve...

CVE-2013-2557

The CVE targets Microsoft Internet Explorer 9’s sandbox protection mechanism. A memory corruption vulnerability could allow remote attackers to cause a denial of service or other unspecified impact via unknown vectors, demonstrated against Flash in Pwn2Own/CanSecWest 2013. Affected component: IE9...

CVE-2013-3872

CVE-2013-3882 (Microsoft Internet Explorer 10) is described in the provided sources as a memory-corruption vulnerability that allows remote code execution or a denial of service via a crafted web site. The NVD entry for CVE-2013-3882 notes it as a distinct vulnerability from CVE-2013-3872, CVE-20...

CVE-2014-2764

CVE-2014-2764 (Internet Explorer memory corruption) is linked to IE 10/11 memory-use issues. Connected analysis outlines a use-after-free/memory-corruption root cause with a Microsoft patch (MS14-035) addressing the issue; POC details and exploitation context are discussed. No definitive product/...

CVE-2014-2803

CVE-2014-2803 affects Microsoft Internet Explorer (IE) versions 8–10, where memory corruption can be triggered by visiting a crafted page, enabling remote code execution or memory corruption-based denial of service. Connected sources confirm IE memory corruption vulnerabilities with remote exploi...

CVE-2014-4089

CVE-2014-4089 concerns memory corruption in Microsoft Internet Explorer 10 and 11 caused by loading a crafted web site, enabling remote code execution or a denial of service. Affected product: Internet Explorer 10/11; vulnerable component: IE memory handling leading to memory corruption. Impact, ...

CVE-2015-1703

CVE-2015-1703 affects Microsoft Internet Explorer 6–11. A remote attacker can escalate privileges by directing a user to a crafted web page, with the underlying issue classified as an elevation of privilege vulnerability. The CVE is noted as distinct from CVE-2015-1704 in public records. Connecte...

CVE-2015-6070

Microsoft Internet Explorer (versions 7–11) is affected by a memory corruption vulnerability that can be triggered by a crafted web page, potentially allowing remote code execution or a denial of service. Connected CNVD entries describe an IE memory corruption issue named similarly to CVE-2015-60...

CVE-2016-0069

CVE-2016-0069 corresponds to Internet Explorer cross-domain policy bypass (Same Origin Policy bypass) affecting IE 9–11. Connected sources indicate the flaw enables information disclosure via cross-domain policy bypass, with MS16-009 addressing the issue. The vulnerability is described as an elev...

CVE-1999-1575

Technical details such as affected software versions, root cause, and exploitation are not publicly provided in the supplied documents. Monitor for updates from official sources for concrete fixes or mitigations.

CVE-2000-0662

The CVE-2000-0662 entry describes a vulnerability in Internet Explorer 5.x and Microsoft Outlook where remote attackers can read arbitrary files by redirecting the contents of an IFRAME via the DHTML Edit Control (DHTMLED). The root cause is tied to the DHTMLED component handling dynamic HTML/IFR...

CVE-2002-0023

CVE-2002-0023 affects Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises in the GetObject function, where malformed requests can bypass some security checks, allowing remote attackers to read arbitrary files. The connected records confirm the affected products and the vulnerability cla...

CVE-2002-0077

CVE-2002-0077 affects Microsoft Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises when objects invoked on HTML pages use CODEBASE/local object handling, causing the Local Computer zone to potentially execute local executables via certain objects (e.g., popup). This could allow remote ...

CVE-2002-1187

CVE-2002-1187 describes a cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 through 6.0. The issue allows remote attackers to read and execute files on the local system via web pages that use the or element and JavaScript, as demonstrated with the PrivacyPolicy.dlg resource. Th...

CVE-2002-1188

CVE-2002-1188 affects Microsoft Internet Explorer 5.01–6.0. The vulnerability arises from uses of the OBJECT tag that are not subjected to proper security checks, enabling remote attackers to disclose information by identifying the path to the Temporary Internet Files folder and accessing user da...

CVE-2006-2382

CVE-2006-2382 (HTML Decoding Memory Corruption Vulnerability) affects Microsoft Internet Explorer 5.01 SP4, 6 SP1 and earlier. It is a heap-based memory corruption flaw in decoding UTF-8 HTML, caused by a miscalculation of memory sizes when translating UTF-8 characters to Unicode, which could all...

CVE-2006-3639

CVE-2006-3639 describes an information disclosure and remote code execution vulnerability in Microsoft Internet Explorer (IE) 5.01 and IE6 related to how a source element is handled during redirects across domains. Exploitation could allow an attacker to read data from a Web page in another IE do...

CVE-2007-3406

CVE-2007-3406 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes multiple absolute path traversal vulnerabilities allowing remote access to arbitrary local files via the file: URI or related attributes/tags (src in bgsound, input, EMBED, img, script; data in object; value in pa...

CVE-2008-0090

The CVE-2008-0090 issue affects DivX Player 6.6.0 through the ActiveX control npUpload.dll. The vulnerability is triggered in the SetPassword method by a long argument, leading to a denial of service (Internet Explorer 7 crash). The connected documents consistently describe this DoS scenario with...