Ie (Microsoft) - vulnerabilities (CVEs)

209 CVEs, 0 in the last 30 days, 189 known versions, newest CVE from 2012-12-30. Vendor: Microsoft.

CVEs of Ie

CVE-2012-4792 - CVSS 8.8 (high), 2012-12-30: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers…
CVE-2012-1539 - CVSS 8.1 (high), 2012-11-14: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreePos Use…
CVE-2012-1545 - CVSS 5.8 (medium), 2012-03-09: Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service (memory…
CVE-2010-5071 - CVSS 5 (medium), 2011-12-07: The JavaScript implementation in Microsoft Internet Explorer 8.0 and earlier does not properly restrict the set of values contained in the object returned by…
CVE-2002-2435 - CVSS 4.3 (medium), 2011-12-07: The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which…
CVE-2011-2383 - CVSS 4.3 (medium), 2011-06-03: Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read…
CVE-2011-2382 - CVSS 4.3 (medium), 2011-06-03: Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows…
CVE-2010-1260 - CVSS 7.5 (high), 2010-06-08: The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an…
CVE-2010-2118 - CVSS 4.3 (medium), 2010-06-01: Microsoft Internet Explorer 6.0.2900.2180 and 8.0.7600.16385 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code…
CVE-2010-1991 - CVSS 5 (medium), 2010-05-20: Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its…
CVE-2010-0492 - CVSS 8.1 (high), 2010-03-31: Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2…
CVE-2010-0248 - CVSS 8.1 (high), 2010-01-22: Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by…
CVE-2009-3671 - CVSS 8.1 (high), 2009-12-09: Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that…
CVE-2009-2529 - CVSS 8.1 (high), 2009-10-14: Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers…
CVE-2009-2576 - CVSS 5 (medium), 2009-07-22: Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode…
CVE-2009-2433 - CVSS 4.3 (medium), 2009-07-10: Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash)…
CVE-2009-2069 - CVSS 5.8 (medium), 2009-06-15: Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows…
CVE-2009-2057 - CVSS 5.8 (medium), 2009-06-15: Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a…
CVE-2009-1529 - CVSS 8.1 (high), 2009-06-10: Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly…
CVE-2009-0551 - CVSS 8.1 (high), 2009-04-15: Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on…
CVE-2009-0550 - CVSS 9.3 (critical), 2009-04-15: Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet…
CVE-2009-0552 - CVSS 9.3 (critical), 2009-04-15: Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote…
CVE-2008-2281 - CVSS 9.3 (critical), 2008-05-18: Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject…
CVE-2008-1085 - CVSS 9.3 (critical), 2008-04-08: Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted…
CVE-2008-0078 - CVSS 9.3 (critical), 2008-02-12: Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute…
CVE-2008-0076 - CVSS 9.3 (critical), 2008-02-12: Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote attackers to execute arbitrary code via crafted HTML layout…
CVE-2007-5344 - CVSS 6.8 (medium), 2007-12-12: Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies,…
CVE-2007-3903 - CVSS 6.8 (medium), 2007-12-12: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1)…
CVE-2007-3902 - CVSS 9.3 (critical), 2007-12-12: Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute…
CVE-2007-5347 - CVSS 6.8 (medium), 2007-12-12: Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object…
CVE-2007-4848 - CVSS 4.3 (medium), 2007-09-12: Microsoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of local files that have associated images via a res:// URI in…
CVE-2007-0943 - CVSS 6.8 (medium), 2007-08-14: Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via crafted Cascading Style Sheets (CSS)…
CVE-2007-3550 - CVSS 7.8 (high), 2007-07-03: Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wildcards via…
CVE-2007-0944 - CVSS 9.3 (critical), 2007-05-08: Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4;…
CVE-2007-0942 - CVSS 9.3 (critical), 2007-05-08: Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and…
CVE-2007-1765 - CVSS 9.3 (critical), 2007-03-30: Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2007-1499 - CVSS 4.3 (medium), 2007-03-17: Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI…
CVE-2006-7065 - CVSS 5 (medium), 2007-03-02: Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that…
CVE-2007-1114 - CVSS 4.3 (medium), 2007-02-26: The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type…
CVE-2007-1091 - CVSS 6.8 (medium), 2007-02-26: Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via…
CVE-2006-7030 - CVSS 5 (medium), 2007-02-23: Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving…
CVE-2007-0219 - CVSS 10 (critical), 2007-02-13: Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnmgrps.dll as ActiveX controls, which…
CVE-2006-4697 - CVSS 9.3 (critical), 2007-02-13: Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary…
CVE-2007-0217 - CVSS 10 (critical), 2007-02-13: The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of…
CVE-2007-0811 - CVSS 4.3 (medium), 2007-02-07: Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a denial of service (NULL pointer dereference…
CVE-2007-0612 - CVSS 7.8 (high), 2007-01-31: Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by…
CVE-2007-0356 - CVSS 5 (medium), 2007-01-19: The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service…
CVE-2007-0024 - CVSS 9.3 (critical), 2007-01-09: Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, and 7 on Windows 2000 SP4, XP SP2,…
CVE-2006-6659 - CVSS 5 (medium), 2006-12-20: The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7…
CVE-2006-5578 - CVSS 2.6 (low), 2006-12-12: Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified…
CVE-2006-5577 - CVSS 4.3 (medium), 2006-12-12: Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses…
CVE-2006-5913 - CVSS 6.4 (medium), 2006-11-15: Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to…
CVE-2006-5884 - CVSS 7.5 (high), 2006-11-14: Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack…
CVE-2006-4687 - CVSS 5.1 (medium), 2006-11-14: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS…
CVE-2006-5805 - CVSS 5 (medium), 2006-11-08: Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to…
CVE-2006-5544 - CVSS 6.4 (medium), 2006-10-26: Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a…
CVE-2006-4888 - CVSS 5 (medium), 2006-09-19: Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element…
CVE-2006-4777 - CVSS 7.6 (high), 2006-09-14: Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on…
CVE-2006-3873 - CVSS 7.5 (high), 2006-09-12: Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912,…
CVE-2006-4560 - CVSS 7.5 (high), 2006-09-06: Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary…
CVE-2006-4495 - CVSS 7.5 (high), 2006-08-31: Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating…
CVE-2006-4446 - CVSS 5 (medium), 2006-08-30: Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a…
CVE-2006-4301 - CVSS 5 (medium), 2006-08-23: Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image…
CVE-2006-3869 - CVSS 7.5 (high), 2006-08-23: Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824,…
CVE-2006-4219 - CVSS 7.5 (high), 2006-08-18: The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by…
CVE-2006-4193 - CVSS 7.5 (high), 2006-08-17: Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by…
CVE-2006-3639 - CVSS 7.5 (high), 2006-08-09: Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read…
CVE-2006-3643 - CVSS 6 (medium), 2006-08-09: Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files"…
CVE-2006-3640 - CVSS 5 (medium), 2006-08-09: Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to obtain the window…
CVE-2006-3450 - CVSS 7.5 (high), 2006-08-08: Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted…
CVE-2006-3638 - CVSS 7.5 (high), 2006-08-08: Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory…
CVE-2006-3637 - CVSS 5.1 (medium), 2006-08-08: Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to…
CVE-2006-3451 - CVSS 7.5 (high), 2006-08-08: Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of…
CVE-2006-3944 - CVSS 5 (medium), 2006-07-31: Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1…
CVE-2006-3943 - CVSS 2.6 (low), 2006-07-31: Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash)…
CVE-2006-3910 - CVSS 5 (medium), 2006-07-28: Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling the NewDefaultItem…
CVE-2006-3730 - CVSS 8.8 (high), 2006-07-21: Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code…
CVE-2006-3658 - CVSS 5 (medium), 2006-07-18: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object,…
CVE-2006-3657 - CVSS 5 (medium), 2006-07-18: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient…
CVE-2006-3659 - CVSS 5 (medium), 2006-07-18: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX…
CVE-2006-3513 - CVSS 5 (medium), 2006-07-11: danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data property of a…
CVE-2006-3510 - CVSS 2.6 (low), 2006-07-11: The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash)…
CVE-2006-3472 - CVSS 5 (medium), 2006-07-10: Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing a long title…
CVE-2006-3471 - CVSS 5 (medium), 2006-07-10: Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a child, which…
CVE-2006-3354 - CVSS 5 (medium), 2006-07-06: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object…
CVE-2006-2385 - CVSS 7.6 (high), 2006-06-13: Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arbitrary code via a…
CVE-2006-2378 - CVSS 6.8 (medium), 2006-06-13: Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me…
CVE-2006-1303 - CVSS 9.3 (critical), 2006-06-13: Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by…
CVE-2006-2900 - CVSS 4 (medium), 2006-06-07: Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a…
CVE-2006-2766 - CVSS 2.6 (low), 2006-06-02: Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs,…
CVE-2006-2094 - CVSS 5.1 (medium), 2006-04-29: Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses…
CVE-2006-1186 - CVSS 10 (critical), 2006-04-11: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and…
CVE-2006-1719 - CVSS 5 (medium), 2006-04-11: Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets (CSS) property.
CVE-2006-1185 - CVSS 7.5 (high), 2006-04-11: Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes…
CVE-2006-1192 - CVSS 2.6 (low), 2006-04-11: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via…
CVE-2006-1188 - CVSS 7.5 (high), 2006-04-11: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to…
CVE-2006-1388 - CVSS 7.5 (high), 2006-03-24: Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.
CVE-2006-1359 - CVSS 9.3 (critical), 2006-03-23: Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain…
CVE-2006-1245 - CVSS 7.5 (high), 2006-03-17: Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via…
CVE-2006-0753 - CVSS 2.6 (low), 2006-02-18: Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory consumption) via…