CVE-2006-5884
Published Nov 14, 2006Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack vectors, possibly rel…
Vendor/product archive
microsoft / internet_explorer CVEs
Beta · best-effort1,731 CVEs tagged to microsoft / internet_explorer — 735 Critical, 473 High, 463 Medium, 60 Low, 0 Unrated.
CVE-2006-5152
Published Oct 5, 2006Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in…
CVE-2006-5162
Published Oct 5, 2006wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (unhandled exception and crash) via a long Content-Type header,…
CVE-2006-4868
Published Sep 19, 2006Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other version…
CVE-2006-4193
Published Aug 17, 2006Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objec…
CVE-2006-3639
Published Aug 9, 2006Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages…
CVE-2006-3640
Published Aug 9, 2006Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to obtain the window location of visited we…
CVE-2006-3643
Published Aug 9, 2006Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Mana…
CVE-2006-3450
Published Aug 8, 2006Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (C…
CVE-2006-3637
Published Aug 8, 2006Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary co…
CVE-2006-3638
Published Aug 8, 2006Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possi…
CVE-2006-3915
Published Jul 28, 2006Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window…
CVE-2006-3897
Published Jul 27, 2006Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescript…
CVE-2006-3898
Published Jul 27, 2006Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Click method of the Internet.HHCtrl.1 Act…
CVE-2006-3899
Published Jul 27, 2006Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CE…
CVE-2006-3729
Published Jul 21, 2006DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument…
CVE-2006-3730
Published Jul 21, 2006Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argume…
CVE-2006-3657
Published Jul 18, 2006Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long…
CVE-2006-3658
Published Jul 18, 2006Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object, which triggers a null…
CVE-2006-3659
Published Jul 18, 2006Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object.
CVE-2006-3591
Published Jul 18, 2006Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocument.TriEditDocument object be…
CVE-2006-3605
Published Jul 18, 2006Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.Reveal…
CVE-2006-3545
Published Jul 13, 2006Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web page with multiple empty APPLET start tags. NOTE: a third…
CVE-2006-3513
Published Jul 11, 2006danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data property of a DirectAnimation DAUserData…
CVE-2006-3511
Published Jul 11, 2006Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the HtmlDlgSafeHelper object, which triggers a…
Showing 1,426-1,450 of 1,731 CVEsPage 58 of 70