microsoft ie 4.x vulnerabilities and exploits

(subscribe to this query)

Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX controls, which allows a remote malicious user to bypass Internet Explorer's security settings and execute arbitrary commands via a malicious web page or email...

Microsoft Ie 4.x Microsoft Ie 5.x

1 EDB exploit

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote malicious user to install software components without prompting the user by stating that the software's manufacturer is Microsoft.

Microsoft Internet Explorer 5 Microsoft Ie 4.x Microsoft Outlook

A Microsoft ActiveX control allows a remote malicious user to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control" vulnerability.

Microsoft Ie 4.1 Microsoft Outlook 98 Microsoft Outlook Express 4.27.3110.1 Microsoft Internet Explorer 4.0 Microsoft Ie 4.0.1 Microsoft Ie 5.0 Microsoft Outlook Express 4.72.2106.4 Microsoft Outlook Express 4.72.3120.0 Microsoft Outlook Express 4.72.3612.1700 Microsoft Outlook Express 5.0 Microsoft Ie 4.0 Microsoft Ie 5 Microsoft Outlook 2000

1 EDB exploit

Internet Explorer 4.x and 5.x does not properly re-validate an SSL certificate if the user establishes a new SSL session with the same server during the same Internet Explorer session, aka one of two different "SSL Certificate Validation" vulnerabilities.

Microsoft Ie 4.0.1 Microsoft Ie 5.0 Microsoft Ie 4.0 Microsoft Ie 5.0.1 Microsoft Internet Explorer 4.0

Microsoft Internet Explorer 4.0 through 7 allows remote malicious users to determine the existence of local files that have associated images via a res:// URI in the src property of a JavaScript Image object, as demonstrated by the URI for a bitmap image resource within a (1) .ex...

The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote malicious user to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.

Microsoft Ie 4.1 Microsoft Ie 5.0 Microsoft Ie 5 Microsoft Visual Studio 6.0 Microsoft Internet Explorer 4.0 Microsoft Ie 4.0

Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.

Microsoft Internet Explorer 4.0 Microsoft Ie 4.0.1 Microsoft Ie 5.0.1 Microsoft Ie 4.0 Microsoft Ie 5.0 Microsoft Ie 5

Microsoft Internet Explorer 6.0.2900.2180 and previous versions allows remote malicious users to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6...

A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote malicious user to read client files, aka a variant of the "Frame Domain Verification" vulnerability.

Microsoft Ie 4.0 Microsoft Ie 5.0 Microsoft Internet Explorer 4.0 Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 5.5

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious e...

Microsoft Internet Explorer 4.0 Microsoft Internet Explorer 5.0 Microsoft Word 97

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook