CVE-2012-1539

CVE-2012-1539 is a use-after-free vulnerability in Microsoft Internet Explorer 9 (CTreePos/CTreeNode) that could allow remote code execution via a crafted web page. Technical details across connected sources indicate memory corruption from accessing objects that were not properly initialized or a...

CVE-2013-3118

CVE-2013-3120 is a memory corruption vulnerability in Microsoft Internet Explorer 10 (MSHTML) related to the CEditAdorner::Detach use-after-free path. Exploitation is achievable through a crafted web page and can lead to remote code execution or a denial of service. An exploit exists (Exploit-DB ...

CVE-2013-3149

CVE-2013-3149 corresponds to memory corruption in Internet Explorer 7 and 8 that can allow remote code execution or memory corruption via a crafted web page. The vulnerability is documented to affect IE7/IE8 on multiple Windows versions and was addressed by Microsoft in security bulletin MS13-055...

CVE-2015-6145

Microsoft Internet Explorer 7 and 8 are affected by CVE-2015-6145 (memory corruption) via a crafted web site, potentially enabling remote code execution or DoS. This CVE is distinct from CVE-2015-6146. CNVD entries corroborate memory corruption in IE7/IE8. Microsoft addressed this family with MS1...

CVE-1999-1447

CVE-1999-1447 affects Internet Explorer 4.0. The vulnerability allows remote attackers to cause a crash (denial of service) through HTML code containing a long CLASSID parameter inside an OBJECT tag. The available sources do not specify a remediation or patch details within the provided documents...

CVE-2002-0025

Internet Explorer 5.01, 5.5 and 6.0 are affected. The vulnerability arises from improper handling of the Content-Type HTML header field, which allows remote attackers to influence which application is used to process a document. Affected component: Internet Explorer versions 5.01, 5.5, and 6.0; r...

CVE-2002-0078

Affected software: Microsoft Internet Explorer 5.5 and 6.0. Vulnerability: zone determination flaw allows a script embedded in a cookie to execute in the Local Computer zone, enabling in‑the‑wild commands with the victim’s privileges. Impact: arbitrary commands can run on the target system due to...

CVE-2003-0446

The CVE-2003-0446 entry concerns Cross-site Scripting (XSS) in Internet Explorer 5.5 and 6.0, potentially in a shared component used by other Microsoft products. The vulnerability arises when processing an XML file that contains a parse error, which allows remote attackers to inject arbitrary web...

CVE-2005-4841

Technical details about CVE-2005-4841 are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, CVE listings, and related advisories.

CVE-2006-7206

CVE-2006-7206 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes a denial-of-service crash caused by creating an ADODB.Recordset object and issuing a sequence of NextRecordset calls with a long string argument, leading to an invalid memory access in SysFreeString. The provided ...

CVE-2007-2161

CVE-2007-2161 affects Microsoft Internet Explorer 7. The vulnerability is triggered by JavaScript that matches a regular expression against a long string (demonstrated with /(.)*/), allowing a remote attacker to cause a denial of service (browser hang). The provided documents do not specify the a...

CVE-2008-1368

CVE-2008-1368 describes a CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6. A remote attacker can supply an ftp:// URL containing a URL-encoded CRLF (%0D%0A) before the FTP command, causing the command to be injected into an authenticated FTP session established in the same bro...

CVE-2008-4381

The CVE-2008-4381 entry describes a vulnerability in Microsoft Internet Explorer 7 where remote attackers can cause an application crash (DoS) by running Javascript that calls alert with a URL-encoded string containing a large number of invalid characters. The core issue is a DoS condition trigge...

CVE-2001-0904

CVE-2001-0904 concerns Internet Explorer versions 5.5 and 6, where the MS01-055 (Q312461) patch modifies the HTTP_USER_AGENT string to indicate that the patch is installed. This behavior can enable remote malicious websites to more easily identify vulnerable clients. The provided records describe...

CVE-2002-0980

The CVE-2002-0980 entry describes a vulnerability in the Web Folder component of Internet Explorer 5.5/6.0 whereby an error message is written to a known temp location. An attacker can inject arbitrary code into that error message and cause execution by referencing the error message file via an m...

CVE-2002-1564

CVE-2002-1564 describes a vulnerability in Internet Explorer 5.5 and 6.0 where a cookie can contain script that is executed when a page loads, allowing remote attackers to steal potentially sensitive information from cookies (information disclosure). The underlying issue is the ability for a page...

CVE-2004-1922

CVE-2004-1922 affects Microsoft Internet Explorer 5.5 and 6.0. The vulnerability arises because memory is allocated based on the memory size written in a BMP file, not the BMP’s actual size. This can allow a remote attacker to cause a denial of service through a small BMP file that specifies a la...

CVE-2005-4844

The CVE-2005-4844 entry concerns the CLSID_ApprenticeICW control enabling a denial-of-service on Internet Explorer by creating a COM object associated with the control’s CLSID, which is not intended for use in IE. Affected context is Internet Explorer with the vulnerable CLSID/COM object interact...

CVE-2006-3658

Microsoft Internet Explorer 6 is affected by CVE-2006-3658. The flaw occurs when accessing the object references of a FolderItem ActiveX object, triggering a null dereference in the security check and enabling a remote attacker to cause a denial of service (crash). The connected sources do not pr...

CVE-2014-2771

CVE-2014-2771 affects Microsoft Internet Explorer 10 and 11 and is described as a use-after-free / memory-corruption vulnerability triggered by visiting a crafted web site (IE Memory Corruption Vulnerability). A connected analysis (TrendLabs) discusses the root cause as memory corruption via use-...

CVE-2001-0092

Affected software: Internet Explorer 5.0–5.5. The issue is a Frame Domain Verification vulnerability where the frame domain is not properly verified within a browser window, allowing a remote attacker to read local client files. This is described as a new variant of the Frame Domain Verification ...

CVE-2001-0722

The CVE concerns Internet Explorer versions 5.5 and 6.0, where a vulnerability allows remote attackers to read and modify the user’s cookies via Javascript executed in an about: URL. Affected software is Internet Explorer 5.5/6.0; the root cause and mechanics are described as the ability to acces...

CVE-2001-0723

CVE-2001-0723 affects Internet Explorer 5.5 and 6.0. The vulnerability allows remote attackers to read and modify user cookies via JavaScript (Second Cookie Handling Vulnerability). Based on the provided documents, the issue impacts the browser’s cookie handling exposed to user sessions and data ...

CVE-2001-0874

CVE-2001-0874/2002-0027 describe a vulnerability in Internet Explorer 5.5/6.0 where remote attackers could read files by HTML passing information from a frame in the client’s domain to a frame in the site’s domain (a variant of Frame Domain Verification). Affected products are IE 5.5–6.0; root ca...

CVE-2001-0919

CVE-2001-0919 affects Internet Explorer 5.50.4134.0100 on Windows ME. When the browser’s cookie prompt option is enabled, it does not warn the user if a cookie is set via Javascript, exposing potential privacy leakage. The provided metrics indicate a low to moderate base severity (CVSS v2: 5.1, M...

CVE-2002-0269

Summary: CVE-2002-0269 concerns Internet Explorer 5.x/6 that treats a loaded object as an HTML document even when its MIME type is text/plain, potentially enabling remote script execution in documents the user trusts not to contain executable content. What is affected: Internet Explorer 5.x and 6...

CVE-2002-0647

CVE-2002-0647 is a buffer overflow in a legacy ActiveX control used to display specially formatted text in Microsoft Internet Explorer 5.01, 5.5, and 6.0, allowing remote code execution. The root cause is a vulnerability in the ActiveX control; affected products are IE versions listed. Impact is ...

CVE-2006-6311

CVE-2006-6311 affects Microsoft Internet Explorer 6.0.2900.2180, where a denial-of-service can be triggered by a style attribute in an HTML table tag whose width is computed via JavaScript. The vulnerability description documents a remote DoS impact, but the connected sources do not provide concr...

CVE-2013-2552

The CVE-2013-2552 entry covers an unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 that enables remote sandbox bypass by abusing access to a Medium integrity process, as demonstrated by VUPEN during Pwn2Own at CanSecWest 2013. Documents identify IE10/Windows 8 as affected ...

CVE-1999-0870

CVE-1999-0870 affects Internet Explorer 4.01. The issue allows remote attackers to read arbitrary files by pasting a file name into the file upload control (untrusted scripted paste). The underlying cause is improper handling of the file upload control, enabling unauthorized read access. The obse...

CVE-2002-0723

CVE-2002-0723 affects Microsoft Internet Explorer 5.5 and 6.0. The flaw arises because IE does not properly verify the domain of a frame within a browser window, enabling remote attackers to read client files or invoke executable objects via the Object tag (Cross Domain Verification in Object Tag...

CVE-2008-4127

CVE-2008-4127 affects Microsoft Internet Explorer (IE) on Windows XP SP2, specifically IE 7 Gold (7.0.5730) and IE 8 Beta (8.0.6001). The vulnerability arises from processing a crafted PNG file, leading to a denial of service via an infinite loop in the CDwnTaskExec::ThreadExec function, causing ...

CVE-2002-0101

CVE-2002-0101 affects Microsoft Internet Explorer 6.0 and earlier. The issue is a local denial of service caused by an infinite loop triggered by modeless dialogs (showModelessDialog), leading to high CPU usage when the dialog’s focus is not released. The available documents do not specify a root...

CVE-2003-1559

CVE-2003-1559 affects Microsoft Internet Explorer 5.22 and IE 5 through SP1 versions. The issue is that Referer headers are sent containing https:// URLs when making requests for http:// resources, enabling remote attackers to read referer log data and potentially access sensitive information. Th...

CVE-2006-3511

The CVE-2006-3511 issue affects Internet Explorer 6 on Windows XP SP2. The vulnerability arises from setting the fonts property of the HtmlDlgSafeHelper object, triggering a null dereference and causing a denial-of-service crash. Public reference sources in the connected documents corroborate thi...