CVE-2013-5051

CVE-2013-5051 affects Microsoft Internet Explorer 10 and 11, allowing a remote attacker to execute arbitrary code or cause a memory corruption-based DoS by visiting a crafted web page. The vulnerability stems from an error in how Internet Explorer accesses an object in memory, enabling remote cod...

CVE-2006-3545

Microsoft Internet Explorer 7.0 Beta is affected by CVE-2006-3545. The vulnerability arises when a web page contains multiple empty APPLET start tags, allowing a remote attacker to trigger a denial of service (application crash). The issue is reported in IE7.0 Beta, with a third party disputing t...

CVE-2007-2161

CVE-2007-2161 affects Microsoft Internet Explorer 7. The vulnerability is triggered by JavaScript that matches a regular expression against a long string (demonstrated with /(.)*/), allowing a remote attacker to cause a denial of service (browser hang). The provided documents do not specify the a...

CVE-2008-1368

CVE-2008-1368 describes a CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6. A remote attacker can supply an ftp:// URL containing a URL-encoded CRLF (%0D%0A) before the FTP command, causing the command to be injected into an authenticated FTP session established in the same bro...

CVE-2008-5551

Microsoft Internet Explorer 8.0 Beta 2 contains an anti-XSS filter bypass vulnerability (the XSS Filter) that allows XSS by injecting data at two positions in HTML documents (STYLE elements and the CSS expression property), described as a "double injection." The connected OpenVAS entry and relate...

CVE-2013-3149

CVE-2013-3149 corresponds to memory corruption in Internet Explorer 7 and 8 that can allow remote code execution or memory corruption via a crafted web page. The vulnerability is documented to affect IE7/IE8 on multiple Windows versions and was addressed by Microsoft in security bulletin MS13-055...

CVE-2014-2771

CVE-2014-2771 affects Microsoft Internet Explorer 10 and 11 and is described as a use-after-free / memory-corruption vulnerability triggered by visiting a crafted web site (IE Memory Corruption Vulnerability). A connected analysis (TrendLabs) discusses the root cause as memory corruption via use-...

CVE-1999-0802

Summary: CVE-1999-0802 concerns a buffer overflow in Internet Explorer 5 that enables remote command execution via a malformed Favorites icon. The connected Red Hat and CVE records mirror the same description. The core detail is the vulnerability class (buffer overflow) in the browser component; ...

CVE-2001-0723

CVE-2001-0723 affects Internet Explorer 5.5 and 6.0. The vulnerability allows remote attackers to read and modify user cookies via JavaScript (Second Cookie Handling Vulnerability). Based on the provided documents, the issue impacts the browser’s cookie handling exposed to user sessions and data ...

CVE-2001-0874

CVE-2001-0874/2002-0027 describe a vulnerability in Internet Explorer 5.5/6.0 where remote attackers could read files by HTML passing information from a frame in the client’s domain to a frame in the site’s domain (a variant of Frame Domain Verification). Affected products are IE 5.5–6.0; root ca...

CVE-2001-0919

CVE-2001-0919 affects Internet Explorer 5.50.4134.0100 on Windows ME. When the browser’s cookie prompt option is enabled, it does not warn the user if a cookie is set via Javascript, exposing potential privacy leakage. The provided metrics indicate a low to moderate base severity (CVSS v2: 5.1, M...

CVE-2001-1539

CVE-2001-1539 describes a stack consumption vulnerability in Internet Explorer involving the JavaScript setTimeout function. It allows remote attackers to cause a denial of service (crash) via setTimeout. The CVE notes that the vendor could not reproduce the problem. Connected records (CVE and NV...

CVE-2002-0025

Internet Explorer 5.01, 5.5 and 6.0 are affected. The vulnerability arises from improper handling of the Content-Type HTML header field, which allows remote attackers to influence which application is used to process a document. Affected component: Internet Explorer versions 5.01, 5.5, and 6.0; r...

CVE-2002-0078

Affected software: Microsoft Internet Explorer 5.5 and 6.0. Vulnerability: zone determination flaw allows a script embedded in a cookie to execute in the Local Computer zone, enabling in‑the‑wild commands with the victim’s privileges. Impact: arbitrary commands can run on the target system due to...

CVE-2004-1922

CVE-2004-1922 affects Microsoft Internet Explorer 5.5 and 6.0. The vulnerability arises because memory is allocated based on the memory size written in a BMP file, not the BMP’s actual size. This can allow a remote attacker to cause a denial of service through a small BMP file that specifies a la...

CVE-2006-3658

Microsoft Internet Explorer 6 is affected by CVE-2006-3658. The flaw occurs when accessing the object references of a FolderItem ActiveX object, triggering a null dereference in the security check and enabling a remote attacker to cause a denial of service (crash). The connected sources do not pr...

CVE-2008-4381

The CVE-2008-4381 entry describes a vulnerability in Microsoft Internet Explorer 7 where remote attackers can cause an application crash (DoS) by running Javascript that calls alert with a URL-encoded string containing a large number of invalid characters. The core issue is a DoS condition trigge...

CVE-1999-1447

CVE-1999-1447 affects Internet Explorer 4.0. The vulnerability allows remote attackers to cause a crash (denial of service) through HTML code containing a long CLASSID parameter inside an OBJECT tag. The available sources do not specify a remediation or patch details within the provided documents...

CVE-2002-0647

CVE-2002-0647 is a buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0, allowing remote code execution. The root cause is a vulnerability in the ActiveX control; affected products are IE versions listed. Impact is ...

CVE-2002-1564

CVE-2002-1564 describes a vulnerability in Internet Explorer 5.5 and 6.0 where a cookie can contain script that is executed when a page loads, allowing remote attackers to steal potentially sensitive information from cookies (information disclosure). The underlying issue is the ability for a page...

CVE-2006-3427

CVE-2006-3427 affects Microsoft Internet Explorer 6. The issue arises when declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, causing a null dereference and a denial of service (crash). Documents do not provide patch/version details or ...

CVE-2006-7206

CVE-2006-7206 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes a denial-of-service crash caused by creating an ADODB.Recordset object and issuing a sequence of NextRecordset calls with a long string argument, leading to an invalid memory access in SysFreeString. The provided ...

CVE-1999-0870

CVE-1999-0870 affects Internet Explorer 4.01. The issue allows remote attackers to read arbitrary files by pasting a file name into the file upload control (untrusted scripted paste). The underlying cause is improper handling of the file upload control, enabling unauthorized read access. The obse...

CVE-2002-0269

Summary: CVE-2002-0269 concerns Internet Explorer 5.x/6 that treats a loaded object as an HTML document even when its MIME type is text/plain, potentially enabling remote script execution in documents the user trusts not to contain executable content. What is affected: Internet Explorer 5.x and 6...

CVE-2002-0723

CVE-2002-0723 affects Microsoft Internet Explorer 5.5 and 6.0. The flaw arises because IE does not properly verify the domain of a frame within a browser window, enabling remote attackers to read client files or invoke executable objects via the Object tag (Cross Domain Verification in Object Tag...

CVE-2005-4843

The CVE-2005-4843 vulnerability affects the SmartConnect Class control. It allows remote attackers to cause an Internet Explorer crash by creating a COM object of the control’s CLSID that is not intended for use within Internet Explorer. The issue is described across multiple sources (Red Hat, CV...

CVE-2005-4844

The CVE-2005-4844 entry concerns the CLSID_ApprenticeICW control enabling a denial-of-service on Internet Explorer by creating a COM object associated with the control’s CLSID, which is not intended for use in IE. Affected context is Internet Explorer with the vulnerable CLSID/COM object interact...

CVE-2006-6311

CVE-2006-6311 affects Microsoft Internet Explorer 6.0.2900.2180, where a denial-of-service can be triggered by a style attribute in an HTML table tag whose width is computed via JavaScript. The vulnerability description documents a remote DoS impact, but the connected sources do not provide concr...

CVE-2013-2552

The CVE-2013-2552 entry covers an unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 that enables remote sandbox bypass by abusing access to a Medium integrity process, as demonstrated by VUPEN during Pwn2Own at CanSecWest 2013. Documents identify IE10/Windows 8 as affected ...

CVE-2002-0101

CVE-2002-0101 affects Microsoft Internet Explorer 6.0 and earlier. The issue is a local denial of service caused by an infinite loop triggered by modeless dialogs (showModelessDialog), leading to high CPU usage when the dialog’s focus is not released. The available documents do not specify a root...

CVE-2008-4127

CVE-2008-4127 affects Microsoft Internet Explorer (IE) on Windows XP SP2, specifically IE 7 Gold (7.0.5730) and IE 8 Beta (8.0.6001). The vulnerability arises from processing a crafted PNG file, leading to a denial of service via an infinite loop in the CDwnTaskExec::ThreadExec function, causing ...

CVE-2001-0092

Affected software: Internet Explorer 5.0–5.5. The issue is a Frame Domain Verification vulnerability where the frame domain is not properly verified within a browser window, allowing a remote attacker to read local client files. This is described as a new variant of the Frame Domain Verification ...

CVE-2003-1559

CVE-2003-1559 affects Microsoft Internet Explorer 5.22 and IE 5 through SP1 versions. The issue is that Referer headers are sent containing https:// URLs when making requests for http:// resources, enabling remote attackers to read referer log data and potentially access sensitive information. Th...

CVE-2005-4841

Technical details about CVE-2005-4841 are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, CVE listings, and related advisories.

CVE-2006-3511

The CVE-2006-3511 issue affects Internet Explorer 6 on Windows XP SP2. The vulnerability arises from setting the fonts property of the HtmlDlgSafeHelper object, triggering a null dereference and causing a denial-of-service crash. Public reference sources in the connected documents corroborate thi...