Internet Explorer - 2029 CVEs (Page 15/17)

2005-12-31

Medium

CVE-2005-4717

Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client cras…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2005-4810

Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest (AJAX).

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2005-4827

Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpReq…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2005-4831

viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other att…

CVSS: 4.3 CWE: N/A View on NVD

Medium

CVE-2005-4840

The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.Addr…

CVSS: 4.3 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

High

CVE-2005-4841

The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not…

CVSS: 7.1 CWE: N/A View on NVD

High

CVE-2005-4842

The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID,…

CVSS: 7.1 CWE: N/A View on NVD

High

CVE-2005-4843

The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not i…

CVSS: 7.8 CWE: N/A View on NVD

High

CVE-2005-4844

The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2005-4845

The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating…

CVSS: 5.0 CWE: CWE-16 View on NVD

2005-12-22

Medium

CVE-2005-4501

MediaWiki before 1.5.4 uses a hard-coded "internal placeholder string", which allows remote attackers to bypass protection against cross-site scripting (XSS) attacks and execute Javascript using inli…

CVSS: 4.3 CWE: N/A View on NVD

2005-12-20

Medium

CVE-2005-4426

Interpretation conflict in YaBB before 2.1 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF file extension, which causes the HTML to be executed…

CVSS: 4.0 CWE: N/A View on NVD

2005-12-15

High

CVE-2005-4269

mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at…

CVSS: 7.8 CWE: N/A View on NVD

2005-12-14

Medium

CVE-2005-2829

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then…

CVSS: 5.1 CWE: N/A View on NVD

Medium

CVE-2005-2830

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive informati…

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2005-2831

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that refe…

CVSS: 7.5 CWE: N/A View on NVD

2005-12-08

High

CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains t…

CVSS: 7.1 CWE: CWE-264 View on NVD

Medium

CVE-2005-4080

Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and s…

CVSS: 4.3 CWE: N/A View on NVD

2005-12-04

High

CVE-2005-3983

Unknown vulnerability in the login page for HP Systems Insight Manager (SIM) 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service (browser h…

CVSS: 7.8 CWE: N/A View on NVD

2005-12-03

Medium

CVE-2005-3975

Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPE…

CVSS: 4.0 CWE: N/A View on NVD

2005-11-26

High

CVE-2005-3840

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) category_id parameter. NOTE: due to a typo, an…

CVSS: 7.5 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

2005-11-05

Medium

CVE-2005-3505

Cross-site scripting (XSS) vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing J…

CVSS: 4.3 CWE: N/A View on NVD

2005-11-03

Medium

CVE-2005-3477

Multiple interpretation error in the image upload handling code in Invision Gallery 2.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML or script in an image whose ty…

CVSS: 4.3 CWE: N/A View on NVD

2005-10-26

Medium

CVE-2005-3312

The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted images and other files such as .GIF, JPG, and…

CVSS: 4.3 CWE: N/A View on NVD

Low

CVE-2005-3310

Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG…

CVSS: 3.5 CWE: N/A View on NVD

2005-10-21

Low

CVE-2005-2126

The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually initiates a file transfer,…

CVSS: 2.6 CWE: N/A View on NVD

2005-10-06

Medium

CVE-2005-3165

Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections t…

CVSS: 4.3 CWE: N/A View on NVD

Medium

CVE-2005-3167

Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, whi…

CVSS: 4.3 CWE: N/A View on NVD

2005-09-27

Medium

CVE-2005-3077

Microsoft Internet Explorer 5.2.3 for Mac OS allows remote attackers to cause a denial of service (crash) via a web page with malformed attributes in a BGSOUND tag, possibly involving double-quotes i…

CVSS: 5.0 CWE: N/A View on NVD

2005-09-07

Medium

CVE-2005-2820

Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via an e-mail message containing Internet Explorer "Conditional Comments" su…

CVSS: 4.3 CWE: N/A View on NVD

2005-08-19

High

CVE-2005-2127

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that refe…

CVSS: 7.5 CWE: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer View on NVD

2005-08-10

Medium

CVE-2005-1988

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corr…

CVSS: 5.1 CWE: N/A View on NVD

High

CVE-2005-1989

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to obtain information and possibly execute code when browsing from a web site to a web folder view using WebDAV, a…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2005-1990

Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference cer…

CVSS: 5.1 CWE: N/A View on NVD

2005-07-19

Medium

CVE-2005-2304

Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC Profile with a large Tag Count.

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2005-2308

The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as…

CVSS: 7.5 CWE: N/A View on NVD

2005-07-13

Low

CVE-2005-2274

Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and fac…

CVSS: 2.6 CWE: N/A View on NVD

2005-07-05

Medium

CVE-2005-0360

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2005-2087

Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibl…

CVSS: 5.0 CWE: CWE-399 View on NVD

2005-06-29

Medium

CVE-2005-2055

RealPlayer 8, 10, 10.5 (6.0.12.1040-1069), and Enterprise and RealOne Player v1 and v2 allows remote malicious web server to create an arbitrary HTML file that executes an RM file via "default settin…

CVSS: 5.0 CWE: N/A View on NVD

2005-06-14

Critical

CVE-2005-1208

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a la…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2005-1211

Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file.

CVSS: 5.1 CWE: N/A View on NVD

2005-06-01

Low

CVE-2005-1790

Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY…

CVSS: 2.6 CWE: CWE-399 View on NVD

2005-05-28

Low

CVE-2005-1791

Microsoft Internet Explorer 6 SP2 (6.0.2900.2180) crashes when the user attempts to add a URI to the restricted zone, in which the full domain name of the URI begins with numeric sequences similar to…

CVSS: 2.6 CWE: N/A View on NVD

Medium

CVE-2005-1829

Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application crash) via two embedded files that call each other.

CVSS: 5.0 CWE: N/A View on NVD

2005-05-05

Medium

CVE-2005-0918

The NPSVG3.dll ActiveX control for Adobe SVG Viewer 3.02 and earlier, when running on Internet Explorer, allows remote attackers to determine the existence of arbitrary files by setting the src prope…

CVSS: 5.0 CWE: CWE-203 - Observable Discrepancy View on NVD

2005-05-02

Medium

CVE-2005-0035

The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile A…

CVSS: 5.1 CWE: N/A View on NVD

High

CVE-2005-0053

Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2005-0054

Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been…

CVSS: 5.1 CWE: N/A View on NVD

High

CVE-2005-0055

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execut…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2005-0056

Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary…

CVSS: 5.1 CWE: N/A View on NVD

Medium

CVE-2005-0148

Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabili…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2005-0500

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks.

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2005-0553

Race condition in the memory management routines in the DHTML object processor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious web pa…

CVSS: 5.1 CWE: N/A View on NVD

High

CVE-2005-0554

Buffer overflow in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2005-0954

Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a malformed Windows Metafile (WMF) file.

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2005-1186

Musicmatch Jukebox 10.00.2047 and earlier adds the musicmatch.com domain to the Trusted Sites zone in Internet Explorer, which allows systems in the domain to conduct unauthorized activities, as demo…

CVSS: 6.8 CWE: N/A View on NVD

2005-04-12

High

CVE-2005-0555

Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a crafted Content Advisor file, aka "Content Advisor Memor…

CVSS: 7.5 CWE: N/A View on NVD

2005-02-09

Critical

CVE-2004-0978

Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote at…

CVSS: 10.0 CWE: CWE-787 - Out-of-bounds Write View on NVD

2005-01-14

Low

CVE-2005-0110

Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a…

CVSS: 2.6 CWE: N/A View on NVD

2004-12-31

Medium

CVE-2004-0979

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operat…

CVSS: 4.6 CWE: N/A View on NVD

Critical

CVE-2004-0985

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .p…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2004-1043

Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window co…

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2004-1050

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discove…

CVSS: 10.0 CWE: N/A View on NVD

High

CVE-2004-1104

Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the le…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2004-1155

Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, a…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2004-1166

CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline (…

CVSS: 7.5 CWE: CWE-94 - Improper Control of Generation of Code ('Code Injection') View on NVD

High

CVE-2004-1173

Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2004-1198

Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested ar…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2004-1416

pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary…

CVSS: 5.1 CWE: N/A View on NVD

Medium

CVE-2004-1443

Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and earlier, when used with Internet Explorer, allows remote attackers to inject arb…

CVSS: 4.3 CWE: N/A View on NVD

Medium

CVE-2004-1527

Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is…

CVSS: 5.0 CWE: N/A View on NVD

Low

CVE-2004-2011

msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (ampersand) in a <Ref href> link, which triggers a parsing error, possibly due t…

CVSS: 2.6 CWE: N/A View on NVD

Low

CVE-2004-2219

Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.b…

CVSS: 2.6 CWE: N/A View on NVD

High

CVE-2004-2291

Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target scr…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2004-2307

Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\) in an HTML tag such as IFRAME or…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2004-2382

The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser crash) via a malformed URL such as "?".

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2004-2383

Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript th…

CVSS: 5.1 CWE: N/A View on NVD

Medium

CVE-2004-2434

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon left brace), which triggers a null dereference when the use…

CVSS: 5.0 CWE: N/A View on NVD

Low

CVE-2004-2476

Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as the file source.

CVSS: 2.6 CWE: N/A View on NVD

Medium

CVE-2004-2480

Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer.

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2004-2704

Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition field for attachments, which causes the attachment to be ren…

CVSS: 4.3 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2004-12-30

Medium

CVE-2004-1376

Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned f…

CVSS: 5.0 CWE: N/A View on NVD

2004-12-23

Medium

CVE-2004-0841

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" a…

CVSS: 5.0 CWE: N/A View on NVD

High

CVE-2004-0842

Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading S…

CVSS: 7.5 CWE: N/A View on NVD

2004-12-18

Low

CVE-2004-1324

The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if…

CVSS: 2.6 CWE: N/A View on NVD

2004-12-15

Medium

CVE-2004-1319

The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the…

CVSS: 5.0 CWE: N/A View on NVD

2004-11-23

Medium

CVE-2004-0284

Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web…

CVSS: 5.0 CWE: N/A View on NVD

2004-11-16

Low

CVE-2004-1331

The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via th…

CVSS: 2.6 CWE: N/A View on NVD

2004-11-03

Critical

CVE-2004-0214

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application cr…

CVSS: 10.0 CWE: N/A View on NVD

Critical

CVE-2004-0216

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB fil…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2004-0843

Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2004-0844

Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phish…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2004-0845

Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web s…

CVSS: 6.4 CWE: N/A View on NVD

2004-09-16

High

CVE-2004-0866

Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation a…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2004-0869

Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers…

CVSS: 5.0 CWE: N/A View on NVD

2004-09-15

Medium

CVE-2004-1686

Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment…

CVSS: 5.0 CWE: N/A View on NVD

2004-08-18

Medium

CVE-2004-0839

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behav…

CVSS: 5.0 CWE: N/A View on NVD

2004-08-06

Critical

CVE-2004-0212

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file contai…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2004-0526

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, comb…

CVSS: 5.0 CWE: N/A View on NVD

Critical

CVE-2004-0549

The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security contex…

CVSS: 10.0 CWE: N/A View on NVD

2004-07-27

High

CVE-2003-1048

Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.

CVSS: 7.8 CWE: CWE-415 - Double Free View on NVD

Medium

CVE-2004-0595

The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be…

CVSS: 6.8 CWE: N/A View on NVD

High

CVE-2004-0719

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to an…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2004-0727

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in t…

CVSS: 7.5 CWE: N/A View on NVD

2004-07-07

Critical

CVE-2004-0420

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a…

CVSS: 10.0 CWE: N/A View on NVD

Medium

CVE-2004-0475

The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstr…

CVSS: 5.1 CWE: N/A View on NVD

Medium

CVE-2004-0479

Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which trig…

CVSS: 5.0 CWE: N/A View on NVD

Low

CVE-2004-0484

mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left…

CVSS: 2.6 CWE: N/A View on NVD

2004-06-14

High

CVE-2003-1041

Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends…

CVSS: 7.5 CWE: N/A View on NVD

2004-05-04

Critical

CVE-2004-0380

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Inte…

CVSS: 10.0 CWE: N/A View on NVD

2004-04-15

High

CVE-2003-0513

Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which cau…

CVSS: 7.5 CWE: N/A View on NVD

2004-04-11

Low

CVE-2004-1922

Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of servi…

CVSS: 2.6 CWE: N/A View on NVD

2004-02-07

Medium

CVE-2004-2090

Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does n…

CVSS: 5.0 CWE: N/A View on NVD

2004-02-03

High

CVE-2003-0814

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Re…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2003-0815

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated usin…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2003-0816

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJP…

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2003-0817

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.

CVSS: 7.5 CWE: N/A View on NVD

High

CVE-2003-0823

Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a di…

CVSS: 7.5 CWE: N/A View on NVD

2004-01-20

Medium

CVE-2003-1025

Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL…

CVSS: 4.3 CWE: CWE-20 - Improper Input Validation View on NVD

About “Internet Explorer”

CVE-2005-4717

CVE-2005-4810

CVE-2005-4827

CVE-2005-4831

CVE-2005-4840

CVE-2005-4841

CVE-2005-4842

CVE-2005-4843

CVE-2005-4844

CVE-2005-4845

CVE-2005-4501

CVE-2005-4426

CVE-2005-4269

CVE-2005-2829

CVE-2005-2830

CVE-2005-2831

CVE-2005-4089

CVE-2005-4080

CVE-2005-3983

CVE-2005-3975

CVE-2005-3840

CVE-2005-3505

CVE-2005-3477

CVE-2005-3312

CVE-2005-3310

CVE-2005-2126

CVE-2005-3165

CVE-2005-3167

CVE-2005-3077

CVE-2005-2820

CVE-2005-2127

CVE-2005-1988

CVE-2005-1989

CVE-2005-1990

CVE-2005-2304

CVE-2005-2308

CVE-2005-2274

CVE-2005-0360

CVE-2005-2087

CVE-2005-2055

CVE-2005-1208

CVE-2005-1211

CVE-2005-1790

CVE-2005-1791

CVE-2005-1829

CVE-2005-0918

CVE-2005-0035

CVE-2005-0053

CVE-2005-0054

CVE-2005-0055

CVE-2005-0056

CVE-2005-0148

CVE-2005-0500

CVE-2005-0553

CVE-2005-0554

CVE-2005-0954

CVE-2005-1186

CVE-2005-0555

CVE-2004-0978

CVE-2005-0110

CVE-2004-0979

CVE-2004-0985

CVE-2004-1043

CVE-2004-1050

CVE-2004-1104

CVE-2004-1155

CVE-2004-1166

CVE-2004-1173

CVE-2004-1198

CVE-2004-1416

CVE-2004-1443

CVE-2004-1527

CVE-2004-2011

CVE-2004-2219

CVE-2004-2291

CVE-2004-2307

CVE-2004-2382

CVE-2004-2383

CVE-2004-2434