cve.bz

microsoft internet explorer vulnerabilities, newest first, page 33

Filter
  1. –CVE-1999-0827EPSS 4.8%

    By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.

  2. –CVE-1999-0354EPSS 5.2%

    Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outloo…

  3. –CVE-1999-1577EPSS 19%

    Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.

  4. –CVE-1999-0877EPSS 18%

    Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.

  5. –CVE-1999-1578EPSS 19%

    Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.

  6. –CVE-1999-1575EPSS 36%

    The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dl…

  7. –CVE-1999-0702EPSS 24%

    Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.

  8. –CVE-1999-0891EPSS 42%

    The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.

  9. –CVE-1999-0670EPSS 8.5%

    Buffer overflow in the Eyedog ActiveX control allows a remote attacker to execute arbitrary commands.

  10. –CVE-1999-0669EPSS 9.1%

    The Eyedog ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.

  11. –CVE-1999-1016EPSS 7.7%

    Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or HTML emails to cause a denial of service (100% CPU consumpt…

  12. –CVE-1999-1235EPSS 2.7%

    Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surf…

  13. –CVE-1999-0668EPSS 23%

    The scriptlet.typelib ActiveX control is marked as "safe for scripting" for Internet Explorer, which allows a remote attacker to execute arbitrary commands as demonstrated by Bubbleboy.

  14. –CVE-1999-0917EPSS 6.2%

    The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.

  15. –CVE-1999-0802EPSS 10%

    Buffer overflow in Internet Explorer 5 allows remote attackers to execute commands via a malformed Favorites icon.

  16. –CVE-1999-1367EPSS 1.2%

    Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users.

  17. –CVE-1999-1241EPSS 14%

    Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.

  18. –CVE-1999-0487EPSS 13%

    The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files.

  19. –CVE-1999-0490EPSS 9.9%

    MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to learn information about a local user's files via an IMG SRC tag.

  20. –CVE-1999-0488EPSS 12%

    Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability.

  21. 8.2CVE-1999-0468EPSS 3.6%

    Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.

  22. –CVE-1999-0469EPSS 18%

    Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client.

  23. –CVE-1999-1370EPSS 1.3%

    The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with physical access if a failure occurs during an unattended installation, and (2) the Task Scheduler Serv…

  24. –CVE-1999-1453EPSS 11%

    Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser ActiveX object.

  25. –CVE-1999-0869EPSS 17%

    Internet Explorer 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, aka frame spoofing.

  26. –CVE-1999-0870EPSS 13%

    Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, aka untrusted scripted paste.

  27. –CVE-1999-0871EPSS 12%

    Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the "Cross Frame Navigate" vulnerability.

  28. –CVE-1999-1447EPSS 13%

    Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag.

  29. –CVE-1999-0537EPSS 6.0%

    A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.

  30. –CVE-1999-0331EPSS 5.0%

    Buffer overflow in Internet Explorer 4.0(1).

  31. –CVE-1999-0967EPSS 6.9%

    Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.

  32. –CVE-1999-1446EPSS 2.0%

    Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not vis…

  33. –CVE-1999-0031EPSS 18%

    JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.

  34. –CVE-1999-0280EPSS 16%

    Remote command execution in Microsoft Internet Explorer using .lnk and .url files.

  35. –CVE-1999-1128EPSS 3.6%

    Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.