microsoft internet explorer 6.0.2900 vulnerabilities and exploits

(subscribe to this query)

2.6

CVSSv2

Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote malicious users to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters wi...

Microsoft Internet Explorer 6.0.2900

4

CVSSv2

Microsoft Internet Explorer allows remote malicious users to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page with an anchor element with a legitimate "href" attribute, a form whose action points to a malicious URL, and an INPUT subm...

Microsoft Internet Explorer 6.0.2900

10

CVSSv2

Internet Explorer, with a security setting below Medium, allows remote malicious users to execute arbitrary commands via a malicious web page that uses the FileSystemObject ActiveX object.

Microsoft Internet Explorer 6.0.2900

5.1

CVSSv2

Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote malicious users to execute arbitrary code via a crafted PNG file.

Microsoft Internet Explorer 6.0.2900

6.8

CVSSv2

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote malicious users to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032.

Microsoft Internet Explorer 6.0.2900

5

CVSSv2

Unspecified versions of Internet Explorer allow remote malicious users to cause a denial of service (crash) via an IFRAME with a src tag containing a "File://" URI followed by an 8-bit character. NOTE: some third parties were unable to verify this issue.

Microsoft Internet Explorer 6.0.2900

2.6

CVSSv2

mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote malicious users to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of...

Microsoft Internet Explorer 6.0.2900

1 EDB exploit

2.6

CVSSv2

mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote malicious users to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the possibility of code execution was origin...

Microsoft Internet Explorer 6.0.2900

1 EDB exploit

7.5

CVSSv2

The scripting engine in Internet Explorer allows remote malicious users to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, a...

Microsoft Internet Explorer 6.0.2900

5

CVSSv2

Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote malicious users to cause a denial of service (crash) via the JavaScript settimeout function. NOTE: the vendor could not reproduce the problem.

Microsoft Internet Explorer 6.0.2900

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook