microsoft ie 7 vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote malicious users to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered...

Microsoft Ie 5.01 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Ie 6 Microsoft Ie 7

9.3

CVSSv2

Unspecified vulnerability in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote malicious users to execute arbitrary code via crafted HTML layout combinations, aka "HTML Rendering Memory Corruption Vulnerability."

Microsoft Ie 7 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Ie 5.01 Microsoft Ie 6

9.3

CVSSv2

Unspecified vulnerability in an ActiveX control (dxtmsft.dll) in Microsoft Internet Explorer 5.01, 6 SP1 and SP2, and 7 allows remote malicious users to execute arbitrary code via a crafted image, aka "Argument Handling Memory Corruption Vulnerability."

Microsoft Activex Microsoft Ie 5.01 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Ie 6 Microsoft Ie 7

6.8

CVSSv2

Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page...

Microsoft Internet Explorer 6 Microsoft Pocket Ie 1.1 Microsoft Pocket Ie 2.0 Microsoft Internet Explorer 8 Microsoft Internet Explorer 8.0b Microsoft Pocket Ie 3.0 Microsoft Pocket Ie 4.0 Microsoft Internet Explorer 5 Microsoft Internet Explorer 5.01 Microsoft Pocket Ie 1.0 Microsoft Internet Explorer Microsoft Internet Explorer 7 Microsoft Internet Explorer 7.0.5730 Microsoft Pocket Ie 2002 Microsoft Pocket Ie 2003

5

CVSSv2

Microsoft Internet Explorer allows remote malicious users to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL stylesheet that triggers a crash in mshtml.dll when a refresh is called, probably a null pointer dereference.

Microsoft Ie 6.0 Microsoft Ie 6 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 6.0.2600 Microsoft Internet Explorer 6.0.2800 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7.0 Microsoft Ie 7.0 Microsoft Ie 7 Microsoft Internet Explorer 6.0.2900 Canon Network Camera Server Vb101 Microsoft Internet Explorer 6.0.2800.1106 Microsoft Internet Explorer 6.0.2900.2180

1 EDB exploit

5

CVSSv2

Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote malicious users to cause a denial of service (excessive application launches) via an HTML...

Microsoft Internet Explorer 6.0.2900.2180 Microsoft Ie 8.0.7600.16385 Microsoft Internet Explorer 7 Microsoft Internet Explorer 7.0

7.5

CVSSv2

Internet Explorer 5.01 through 6 allows remote malicious users to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "w...

Microsoft Ie 5.0.1 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 5.0.1 Microsoft Ie 5.2.3 Microsoft Ie 6.0 Microsoft Ie 7.0 Microsoft Internet Explorer 6.0

4.3

CVSSv2

Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote malicious users to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the "Navig...

Microsoft Ie 7.0

1 EDB exploit

6.8

CVSSv2

Microsoft Internet Explorer 7 allows remote malicious users to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers.

Microsoft Internet Explorer 6.0 Microsoft Ie 6.0 Microsoft Ie 7.0

7.8

CVSSv2

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote malicious users to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2)...

Microsoft Internet Explorer 5.0.1 Microsoft Ie 6.0 Microsoft Ie 7.0 Microsoft Internet Explorer 7.0 Microsoft Ie 5.0 Ta3 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0

1 EDB exploit

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook