Microsoft

Internet Explorer

1637 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2005-4841

  • EPSS 12.01%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

7.1

CVE-2005-4842

  • EPSS 12.01%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explo...

7.8

CVE-2005-4843

  • EPSS 13.11%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

7.1

CVE-2005-4844

  • EPSS 12.01%
  • Published 31.12.2005 05:00:00
  • Last modified 03.04.2025 01:03:51

The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.

5.1

CVE-2005-2829

  • EPSS 20.05%
  • Published 14.12.2005 11:03:00
  • Last modified 03.04.2025 01:03:51

Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the dis...

5

CVE-2005-2830

  • EPSS 50.73%
  • Published 14.12.2005 11:03:00
  • Last modified 03.04.2025 01:03:51

Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."

7.5

CVE-2005-2831

  • EPSS 57.82%
  • Published 14.12.2005 11:03:00
  • Last modified 03.04.2025 01:03:51

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for...

7.1

CVE-2005-4089

Exploit
  • EPSS 43.11%
  • Published 08.12.2005 11:03:00
  • Last modified 03.04.2025 01:03:51

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) file...

4.3

CVE-2005-3312

Exploit
  • EPSS 27.24%
  • Published 26.10.2005 10:02:00
  • Last modified 03.04.2025 01:03:51

The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML in corrupted images and other files such as .GIF, JPG, and WAV, which is rendered as HTML when the user clicks...

5.1

CVE-2005-1988

  • EPSS 83.44%
  • Published 10.08.2005 04:00:00
  • Last modified 03.04.2025 01:03:51

Unknown vulnerability in Internet Explorer 5.0, 5.5, and 6.0 allows remote attackers to execute arbitrary code via a web site or an HTML e-mail containing a crafted JPEG image that causes memory corruption, aka "JPEG Image Rendering Memory Corruption...