CVE-2006-1191
Published Apr 11, 2006Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitiv…
Vendor/product archive
microsoft / internet_explorer CVEs
Beta · best-effort1,731 CVEs tagged to microsoft / internet_explorer — 735 Critical, 473 High, 463 Medium, 60 Low, 0 Unrated.
CVE-2006-1192
Published Apr 11, 2006Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that…
CVE-2006-1626
Published Apr 5, 2006Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious S…
CVE-2006-1388
Published Mar 24, 2006Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.
CVE-2006-1359
Published Mar 23, 2006Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbo…
CVE-2006-1016
Published Mar 7, 2006Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbi…
CVE-2006-0830
Published Feb 21, 2006The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that conta…
CVE-2006-0799
Published Feb 19, 2006Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page with an anchor element with a legitima…
CVE-2006-0585
Published Feb 8, 2006jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via a Shockwave Flash object that contains…
CVE-2006-0057
Published Jan 27, 2006Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unknown vectors involving crafted HTML, whi…
CVE-2005-3240
Published Dec 31, 2005Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-d…
CVE-2005-4625
Published Dec 31, 2005Drivers for certain display adapters, including (1) an unspecified ATI driver and (2) an unspecified Intel driver, might allow remote attackers to cause a denial of service (syste…
CVE-2005-4717
Published Dec 31, 2005Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of…
CVE-2005-4810
Published Dec 31, 2005Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Content-type header sent in response to an XM…
CVE-2005-4827
Published Dec 31, 2005Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling o…
CVE-2005-4840
Published Dec 31, 2005The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the…
CVE-2005-4841
Published Dec 31, 2005The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's…
CVE-2005-4842
Published Dec 31, 2005The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with t…
CVE-2005-4843
Published Dec 31, 2005The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's C…
CVE-2005-4844
Published Dec 31, 2005The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's…
CVE-2005-2829
Published Dec 14, 2005Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a fil…
CVE-2005-2830
Published Dec 14, 2005Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain…
CVE-2005-2831
Published Dec 14, 2005Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embed…
CVE-2005-4089
Published Dec 8, 2005Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files…
CVE-2005-3312
Published Oct 26, 2005The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted images and other files suc…
Showing 1,476-1,500 of 1,731 CVEsPage 60 of 70