CVE-2006-3512

CVE-2006-3512 affects Internet Explorer 6 on Windows XP. The vulnerability arises when the Enabled property of a DXTFilter ActiveX object is set to true, leading to a null dereference and a remote denial of service. The issue is documented in multiple sources (e.g., NVD) with a CVSS base score of...

CVE-2006-3658

Microsoft Internet Explorer 6 is affected by CVE-2006-3658. The flaw occurs when accessing the object references of a FolderItem ActiveX object, triggering a null dereference in the security check and enabling a remote attacker to cause a denial of service (crash). The connected sources do not pr...

CVE-2007-4356

Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, allowing context-dependent attackers to obtain sensitive information by reading the HTML source. The vulnerability is demonstrated in (1) .htm, (2) .html, or (3) .mht files. The prov...

CVE-2008-4381

The CVE-2008-4381 entry describes a vulnerability in Microsoft Internet Explorer 7 where remote attackers can cause an application crash (DoS) by running Javascript that calls alert with a URL-encoded string containing a large number of invalid characters. The core issue is a DoS condition trigge...

CVE-2008-5551

Microsoft Internet Explorer 8.0 Beta 2 contains an anti-XSS filter bypass vulnerability (the XSS Filter) that allows XSS by injecting data at two positions in HTML documents (STYLE elements and the CSS expression property), described as a "double injection." The connected OpenVAS entry and relate...

CVE-2013-3118

CVE-2013-3120 is a memory corruption vulnerability in Microsoft Internet Explorer 10 (MSHTML) related to the CEditAdorner::Detach use-after-free path. Exploitation is achievable through a crafted web page and can lead to remote code execution or a denial of service. An exploit exists (Exploit-DB ...

CVE-2015-1703

CVE-2015-1703 affects Microsoft Internet Explorer 6–11. A remote attacker can escalate privileges by directing a user to a crafted web page, with the underlying issue classified as an elevation of privilege vulnerability. The CVE is noted as distinct from CVE-2015-1704 in public records. Connecte...

CVE-2015-6145

Microsoft Internet Explorer 7 and 8 are affected by CVE-2015-6145 (memory corruption) via a crafted web site, potentially enabling remote code execution or DoS. This CVE is distinct from CVE-2015-6146. CNVD entries corroborate memory corruption in IE7/IE8. Microsoft addressed this family with MS1...

CVE-1999-0802

Summary: CVE-1999-0802 concerns a buffer overflow in Internet Explorer 5 that enables remote command execution via a malformed Favorites icon. The connected Red Hat and CVE records mirror the same description. The core detail is the vulnerability class (buffer overflow) in the browser component; ...

CVE-1999-1128

The CVE-1999-1128 entry describes Internet Explorer 3.01 on Windows 95 as vulnerable. A .isp file is automatically downloaded and executed from remote malicious sites without user prompts, allowing remote arbitrary command execution. The available documents do not specify a remediation or patch, ...

CVE-1999-1447

CVE-1999-1447 affects Internet Explorer 4.0. The vulnerability allows remote attackers to cause a crash (denial of service) through HTML code containing a long CLASSID parameter inside an OBJECT tag. The available sources do not specify a remediation or patch details within the provided documents...

CVE-2002-0461

CVE-2002-0461 affects Internet Explorer 5.01 through 6. A crafted web page using JavaScript that calls location.replace on itself can create a loop, leading to a denial of service via application crash. The connected sources confirm the affected product and the underlying cause (recursive locatio...

CVE-2004-0845

CVE-2004-0845 concerns Internet Explorer (IE) versions 5.01, 5.5, and 6. The vulnerability arises from improper caching of SSL content, allowing an attacker to obtain information or spoof content by redirecting a user to a malicious site with the same host name as the target, causing cached conte...

CVE-2005-4841

Technical details about CVE-2005-4841 are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, CVE listings, and related advisories.

CVE-2006-3427

CVE-2006-3427 affects Microsoft Internet Explorer 6. The issue arises when declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, causing a null dereference and a denial of service (crash). Documents do not provide patch/version details or ...

CVE-2006-3545

Microsoft Internet Explorer 7.0 Beta is affected by CVE-2006-3545. The vulnerability arises when a web page contains multiple empty APPLET start tags, allowing a remote attacker to trigger a denial of service (application crash). The issue is reported in IE7.0 Beta, with a third party disputing t...

CVE-2006-6311

CVE-2006-6311 affects Microsoft Internet Explorer 6.0.2900.2180, where a denial-of-service can be triggered by a style attribute in an HTML table tag whose width is computed via JavaScript. The vulnerability description documents a remote DoS impact, but the connected sources do not provide concr...

CVE-2001-0723

CVE-2001-0723 affects Internet Explorer 5.5 and 6.0. The vulnerability allows remote attackers to read and modify user cookies via JavaScript (Second Cookie Handling Vulnerability). Based on the provided documents, the issue impacts the browser’s cookie handling exposed to user sessions and data ...

CVE-2002-0191

Microsoft Internet Explorer 5.01, 5.5 and 6.0 are affected by CVE-2002-0191, which allows remote attackers to view arbitrary files containing the "{" character via script using the cssText property of a stylesheet object (Local Information Disclosure through HTML Object). The vulnerability is des...

CVE-2002-0980

The CVE-2002-0980 entry describes a vulnerability in the Web Folder component of Internet Explorer 5.5/6.0 whereby an error message is written to a known temp location. An attacker can inject arbitrary code into that error message and cause execution by referencing the error message file via an m...

CVE-1999-0870

CVE-1999-0870 affects Internet Explorer 4.01. The issue allows remote attackers to read arbitrary files by pasting a file name into the file upload control (untrusted scripted paste). The underlying cause is improper handling of the file upload control, enabling unauthorized read access. The obse...

CVE-2002-0078

Affected software: Microsoft Internet Explorer 5.5 and 6.0. Vulnerability: zone determination flaw allows a script embedded in a cookie to execute in the Local Computer zone, enabling in‑the‑wild commands with the victim’s privileges. Impact: arbitrary commands can run on the target system due to...

CVE-2002-1564

CVE-2002-1564 describes a vulnerability in Internet Explorer 5.5 and 6.0 where a cookie can contain script that is executed when a page loads, allowing remote attackers to steal potentially sensitive information from cookies (information disclosure). The underlying issue is the ability for a page...

CVE-2003-0446

The CVE-2003-0446 entry concerns Cross-site Scripting (XSS) in Internet Explorer 5.5 and 6.0, potentially in a shared component used by other Microsoft products. The vulnerability arises when processing an XML file that contains a parse error, which allows remote attackers to inject arbitrary web...

CVE-2001-0874

CVE-2001-0874/2002-0027 describe a vulnerability in Internet Explorer 5.5/6.0 where remote attackers could read files by HTML passing information from a frame in the client’s domain to a frame in the site’s domain (a variant of Frame Domain Verification). Affected products are IE 5.5–6.0; root ca...

CVE-2006-3511

The CVE-2006-3511 issue affects Internet Explorer 6 on Windows XP SP2. The vulnerability arises from setting the fonts property of the HtmlDlgSafeHelper object, triggering a null dereference and causing a denial-of-service crash. Public reference sources in the connected documents corroborate thi...

CVE-2006-7206

CVE-2006-7206 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes a denial-of-service crash caused by creating an ADODB.Recordset object and issuing a sequence of NextRecordset calls with a long string argument, leading to an invalid memory access in SysFreeString. The provided ...

CVE-2002-0269

Summary: CVE-2002-0269 concerns Internet Explorer 5.x/6 that treats a loaded object as an HTML document even when its MIME type is text/plain, potentially enabling remote script execution in documents the user trusts not to contain executable content. What is affected: Internet Explorer 5.x and 6...

CVE-2002-0647

CVE-2002-0647 is a buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0, allowing remote code execution. The root cause is a vulnerability in the ActiveX control; affected products are IE versions listed. Impact is ...

CVE-2005-4844

The CVE-2005-4844 entry concerns the CLSID_ApprenticeICW control enabling a denial-of-service on Internet Explorer by creating a COM object associated with the control’s CLSID, which is not intended for use in IE. Affected context is Internet Explorer with the vulnerable CLSID/COM object interact...

CVE-2002-0101

CVE-2002-0101 affects Microsoft Internet Explorer 6.0 and earlier. The issue is a local denial of service caused by an infinite loop triggered by modeless dialogs (showModelessDialog), leading to high CPU usage when the dialog’s focus is not released. The available documents do not specify a root...

CVE-2003-1559

CVE-2003-1559 affects Microsoft Internet Explorer 5.22 and IE 5 through SP1 versions. The issue is that Referer headers are sent containing https:// URLs when making requests for http:// resources, enabling remote attackers to read referer log data and potentially access sensitive information. Th...

CVE-2008-4127

CVE-2008-4127 affects Microsoft Internet Explorer (IE) on Windows XP SP2, specifically IE 7 Gold (7.0.5730) and IE 8 Beta (8.0.6001). The vulnerability arises from processing a crafted PNG file, leading to a denial of service via an infinite loop in the CDwnTaskExec::ThreadExec function, causing ...

CVE-2001-0092

Affected software: Internet Explorer 5.0–5.5. The issue is a Frame Domain Verification vulnerability where the frame domain is not properly verified within a browser window, allowing a remote attacker to read local client files. This is described as a new variant of the Frame Domain Verification ...

CVE-2002-0723

CVE-2002-0723 affects Microsoft Internet Explorer 5.5 and 6.0. The flaw arises because IE does not properly verify the domain of a frame within a browser window, enabling remote attackers to read client files or invoke executable objects via the Object tag (Cross Domain Verification in Object Tag...