CVE-2000-0596

Summary: The CVE-2000-0596 issue involves Internet Explorer (IE 5.x/IE 5.01) opening Microsoft Access database/project files via HTML OBJECT tags without warning, enabling remote code execution via embedded VBA/macro. Affected components: IE’s handling of OBJECT tags referencing Access file types...

CVE-2000-0767

The vulnerability CVE-2000-0767 is the Scriptlet Rendering issue in the ActiveX control used to invoke a scriptlet in Internet Explorer 4.x/5.x. The ActiveX control renders arbitrary file types instead of HTML, enabling an attacker to read arbitrary files. This entry describes the vulnerability w...

CVE-2001-0002

Affected software: Internet Explorer 5.5 and earlier.What’s vulnerable: how IE handles cached content in the Local Computer Zone and execution via .chm files, enabling remote code execution.Impact: remote attacker could run arbitrary code on the affected host.Remediation: apply the relevant cumul...

CVE-2002-0024

CVE-2002-0024 affects Internet Explorer 5.01, 5.5 and 6.0. The issue allows an attacker to abuse Content-Disposition and Content-Type HTML headers to alter how a downloaded file’s name is displayed, potentially deceiving users into opening unsafe files. Exploitation details are not provided in th...

CVE-2002-0188

Affected software: Microsoft Internet Explorer 5.01 and 6.0. The vulnerability arises from incorrect handling of Content-Disposition and Content-Type header fields, causing the spoofed file type to be passed to the OS for handling instead of triggering an error. This can enable remote code execut...

CVE-2002-0242

The CVE-2002-0242 entry concerns Internet Explorer 6 and describes a cross-site scripting vulnerability where output from a remote server via an Extended HTML Form is not properly cleansed, allowing remote script execution. Affected component: Internet Explorer 6 (Extended HTML Form handling). Ro...

CVE-2005-0954

CVE-2005-0954 affects Windows 2000 SP1, specifically Windows Explorer and Internet Explorer, where a malformed Windows Metafile (WMF) can be used by a remote attacker to consume CPU and cause a denial of service. The vulnerability is described as enabling a remote DoS via WMF parsing, with the NV...

CVE-2005-4810

Microsoft Internet Explorer 7.0 Beta3 and earlier is affected. The vulnerability arises when a remote attacker exploits an XMLHttpRequest response that contains a text/html Content-Type header, causing the browser to crash and leading to a denial of service. The documented impact is a crash; no o...

CVE-2006-2384

CVE-2006-2384 corresponds to Internet Explorer address bar spoofing: IE 5.01 SP4, 6 SP1 and earlier can display a trusted UI while navigating to a malicious site, enabling phishing-like spoofing. The vulnerability arises from a method that preserves the address bar/trust UI after navigation. Micr...

CVE-2006-3729

CVE-2006-3729 affects DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed. A large negative integer argument to getDataMemberName in OWC11.DataSourceControl.11 can cause an integer overflow and a null dereference, leading to a denial of service (crash). The NVD notes ...

CVE-2006-5581

CVE-2006-5581 concerns Microsoft Internet Explorer 6, where parsing certain DHTML script function calls leads to memory corruption via incorrectly created elements. Exploitation requires the user to view a malicious page, enabling remote code execution on vulnerable IE 6 clients. The vulnerabilit...

CVE-2007-2938

The CVE-2007-2938 entry affects the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) version 5.4.0.6. It describes a buffer overflow condition that, when Internet Explorer 6 is used, allows remote attackers to execute arbitrary code via a long argument to th...

CVE-2007-4227

Microsoft Windows Explorer (explorer.exe) is affected by CVE-2007-4227, a user-assisted DoS vulnerability triggered by processing a crafted image file (e.g., something.jpg). The connected documents also reference CVE-2007-3958 (GIF file) as related, indicating a similar DoS vector in explorer.exe...

CVE-2007-5355

The CVE describes a design/logic issue in Microsoft WPAD for Internet Explorer 6/7 where, if a primary DNS suffix has three or more components, unqualified wpad queries can resolve to a host in a deeper second-level domain outside the configured DNS zone, enabling potential MITM by remote WPAD se...

CVE-2008-4787

CVE-2008-4787 describes a visual truncation/address-bar spoofing issue in Microsoft Internet Explorer 6. The vulnerability occurs when a hostname contains many characters, which render as whitespace, enabling a page to appear at a different address than its actual content. The entry cites MSRC789...

CVE-2009-3267

The CVE-2009-3267 entry covers Internet Explorer (IE) versions 6 (6.0.2900.2180) and 7 (7.0.6000.16711). The vulnerability is a denial of service caused by processing an automatically submitted form containing a KEYGEN element, leading to CPU consumption. The connected OpenVAS entries corroborate...

CVE-2011-1964

CVE-2011-1964 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 6–9 related to STYLE object handling, allowing remote code execution when visiting a crafted page. Connected sources confirm the affected product (IE), nature (STYLE object memory corruption), and the ve...

CVE-2011-3404

CVE-2011-3404 affects Microsoft Internet Explorer 6–9. The issue arises because IE does not properly enforce the Content-Disposition HTTP header, enabling a remote attacker to render the HTTP response body in a way that leaks content from a different domain or Internet Explorer zone when visiting...

CVE-2013-3872

CVE-2013-3882 (Microsoft Internet Explorer 10) is described in the provided sources as a memory-corruption vulnerability that allows remote code execution or a denial of service via a crafted web site. The NVD entry for CVE-2013-3882 notes it as a distinct vulnerability from CVE-2013-3872, CVE-20...

CVE-2013-3914

CVE-2013-3914 affects Microsoft Internet Explorer 9–11. Description confirms memory corruption that enables remote code execution or memory corruption Denial of Service via a crafted site. Root cause: memory corruption in IE’s handling of certain objects/files, leading to code execution in the co...

CVE-2014-2755

CVE-2014-2755 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site. The Connected document for CVE-2014-1785 indicates this family of vulnerabilities (Internet Explorer Memory Corruption) has been exploited (Exploits listed on Exploit-DB) and is associated with IE11. T...

CVE-2014-2764

CVE-2014-2764 (Internet Explorer memory corruption) is linked to IE 10/11 memory-use issues. Connected analysis outlines a use-after-free/memory-corruption root cause with a Microsoft patch (MS14-035) addressing the issue; POC details and exploitation context are discussed. No definitive product/...

CVE-2014-2803

CVE-2014-2803 affects Microsoft Internet Explorer (IE) versions 8–10, where memory corruption can be triggered by visiting a crafted page, enabling remote code execution or memory corruption-based denial of service. Connected sources confirm IE memory corruption vulnerabilities with remote exploi...

CVE-2014-4096

The connected advisories describe remote code execution and memory corruption in Microsoft Internet Explorer 11 through crafted pages, with concrete technical details such as use-after-free and uninitialized memory (e.g., CBackgroundCollection, CHTMLEditorProxy, CAttrValue) leading to arbitrary c...

CVE-2015-6070

Microsoft Internet Explorer (versions 7–11) is affected by a memory corruption vulnerability that can be triggered by a crafted web page, potentially allowing remote code execution or a denial of service. Connected CNVD entries describe an IE memory corruption issue named similarly to CVE-2015-60...

CVE-2015-6156

CVE-2015-6156 refers to a memory corruption vulnerability in Microsoft Internet Explorer 9–11 (and related browser components) that could be triggered by visiting a crafted website. The issue allows remote attackers to potentially execute arbitrary code or cause a denial of service, and is noted ...

CVE-2016-0069

CVE-2016-0069 corresponds to Internet Explorer cross-domain policy bypass (Same Origin Policy bypass) affecting IE 9–11. Connected sources indicate the flaw enables information disclosure via cross-domain policy bypass, with MS16-009 addressing the issue. The vulnerability is described as an elev...

CVE-2016-0106

CVE-2016-0106 concerns Microsoft Internet Explorer 11 memory corruption via a crafted web site, leading to remote code execution or memory corruption. Connected data confirms the same family affects IE11/Edge with similar impact; root cause is improper handling of memory objects in IE11. The vuln...

CVE-1999-0670

CVE-1999-0670 documents a buffer overflow in the Eyedog ActiveX control that allows a remote attacker to execute arbitrary commands. This is corroborated by multiple connected entries (NVD, CVE List, Red Hat, EUVD). The exact vulnerable versions, affected products, exploit details, and remediatio...

CVE-2000-0662

The CVE-2000-0662 entry describes a vulnerability in Internet Explorer 5.x and Microsoft Outlook where remote attackers can read arbitrary files by redirecting the contents of an IFRAME via the DHTML Edit Control (DHTMLED). The root cause is tied to the DHTMLED component handling dynamic HTML/IFR...

CVE-2002-0026

IE 5.5/6.0 remote code execution via an object handling asynchronous events after initial security checks. Exploitation would bypass scripting restrictions, enabling arbitrary script execution. Remediation notes in connected docs point to Microsoft MS02-005 (and MS05-020) patches; OpenVAS entries...

CVE-2002-0077

CVE-2002-0077 affects Microsoft Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises when objects invoked on HTML pages use CODEBASE/local object handling, causing the Local Computer zone to potentially execute local executables via certain objects (e.g., popup). This could allow remote ...

CVE-2002-1187

CVE-2002-1187 describes a cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 through 6.0. The issue allows remote attackers to read and execute files on the local system via web pages that use the or element and JavaScript, as demonstrated with the PrivacyPolicy.dlg resource. Th...

CVE-2002-1188

CVE-2002-1188 affects Microsoft Internet Explorer 5.01–6.0. The vulnerability arises from uses of the OBJECT tag that are not subjected to proper security checks, enabling remote attackers to disclose information by identifying the path to the Temporary Internet Files folder and accessing user da...

CVE-2002-2311

Microsoft Internet Explorer 6.0 (and possibly others) is affected by CVE-2002-2311. The issue arises when a webpage contains a onkeydown handler that checks event.ctrlKey or event.shiftKey; with those keys pressed, a remote attacker can upload arbitrary file contents. This is the underlying vulne...

CVE-2004-1173

Internet Explorer 6 contains a vulnerability where remote attackers can bypass the popup blocker using DOM methods in the DHTML Editing Component (DEC) and showModalDialog calls. Root cause: the DHTML Editing Component/DEC enables a bypass via its DOM API. Impact described as bypassing the popup ...

CVE-2004-2307

CVE-2004-2307 affects Microsoft Internet Explorer 6.0.2600 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (browser crash) by using a shell: URI with double backslashes (\) in an HTML tag (e.g., IFRAME or A). The connected documents confirm the attack vector ...

CVE-2004-2476

The vulnerability CVE-2004-2476 affects Microsoft Internet Explorer 6.0. A remote attacker can induce a denial-of-service by embedding an IFRAME whose source is the character "?"; this leads to an infinite loop and browser crash. The available documents confirm the affected product and the failur...

CVE-2005-2304

The CVE-2005-2304 entry concerns Microsoft MSN Messenger 9.0 and Internet Explorer 6.0, where processing an image with an ICC Profile that has a large Tag Count can cause a denial of service (crash). The vulnerability is rooted in image handling in these products, enabling a remote attacker to tr...

CVE-2005-3240

CVE-2005-3240 is described as a race condition in Microsoft Internet Explorer where a user-assisted drag-and-drop action could overwrite files or possibly execute code. The connected CVE-3840 records indicate this SQL injection entry is a duplicate/typo and that the correct identifier is CVE-2005...

CVE-2006-2056

CVE-2006-2056 affects Internet Explorer 6 on Windows XP SP2. The vuln is an argument-injection flaw where an attacker can influence command line arguments passed to a launched mail client via double-quote characters in a mailto: handler, demonstrated by starting Outlook with an arbitrary attachme...

CVE-2006-2382

CVE-2006-2382 (HTML Decoding Memory Corruption Vulnerability) affects Microsoft Internet Explorer 5.01 SP4, 6 SP1 and earlier. It is a heap-based memory corruption flaw in decoding UTF-8 HTML, caused by a miscalculation of memory sizes when translating UTF-8 characters to Unicode, which could all...

CVE-2011-1251

CVE-2011-1251 refers to a memory handling flaw in Microsoft Internet Explorer 8 (DOM Manipulation Memory Corruption). The vulnerability arises when IE processes DOM objects that are uninitialized or already deleted, enabling remote code execution if a user views a malicious page. Public details a...

CVE-2013-2557

The CVE targets Microsoft Internet Explorer 9’s sandbox protection mechanism. A memory corruption vulnerability could allow remote attackers to cause a denial of service or other unspecified impact via unknown vectors, demonstrated against Flash in Pwn2Own/CanSecWest 2013. Affected component: IE9...

CVE-2013-3141

CVE-2013-3141 affects Microsoft Internet Explorer 8 and 9. The vulnerability => remote attackers can trigger memory corruption via a crafted web site, enabling arbitrary code execution or a denial of service. The issue is distinct from CVE-2013-3110. Affected products: IE 8/9; root cause descr...

CVE-2014-4089

CVE-2014-4089 concerns memory corruption in Microsoft Internet Explorer 10 and 11 caused by loading a crafted web site, enabling remote code execution or a denial of service. Affected product: Internet Explorer 10/11; vulnerable component: IE memory handling leading to memory corruption. Impact, ...

CVE-2014-4099

CVE-2014-4099 in Microsoft Internet Explorer (IE) 9–11 is linked to a remote code execution vulnerability arising from out-of-bounds indexing of CCanvasRadialGradient objects in IE. The flaw enables an attacker to run arbitrary code when a user visits a crafted page or file, with the attack requi...

CVE-2015-6144

CVE-2015-6144 corresponds to a Microsoft Internet Explorer/Edge XSS Filter Bypass vulnerability. The connected sources confirm IE versions 8–11 and Edge are affected by mishandling HTML attributes in HTTP responses, enabling a remote attacker to bypass the built-in XSS protection via unspecified ...

CVE-1999-1575

Technical details such as affected software versions, root cause, and exploitation are not publicly provided in the supplied documents. Monitor for updates from official sources for concrete fixes or mitigations.

CVE-2002-0023

CVE-2002-0023 affects Internet Explorer 5.01, 5.5 and 6.0. The vulnerability arises in the GetObject function, where malformed requests can bypass some security checks, allowing remote attackers to read arbitrary files. The connected records confirm the affected products and the vulnerability cla...