microsoft internet explorer 7.0.5730.11 vulnerabilities and exploits

(subscribe to this query)

The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding HTTP request header, which allows remote malicious users to conduct HTTP request splitting and HTTP request smuggling attacks via a POST con...

Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0.5730.11

CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote malicious users to conduct HTTP response splitting attacks via a LF (%0a) in the username attribute.

Microsoft Internet Explorer 7.0.5730.11

Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote malicious users to cause a denial of service (application crash) and possibly have unspecified other impact via a long URL in the first argument.

Microsoft Internet Explorer 8.0.6001 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7 Microsoft Internet Explorer 7.0.5730.11 Microsoft Internet Explorer 7.00.6000.16441 Microsoft Internet Explorer 7.0.5730 Microsoft Ie 8.0b Microsoft Internet Explorer 7.00.5730.1100 Microsoft Internet Explorer 7.00.6000.16386

1 EDB exploit

Microsoft Internet Explorer 6 and 7 allows remote malicious users to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of ...

Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 6.0.2600 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Internet Explorer 6.0.2900 Microsoft Internet Explorer 6.0.2900.2180 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0.2800 Microsoft Internet Explorer 6.0.2800.1106 Microsoft Internet Explorer 7.0.5730.11 Microsoft Ie 6.0

CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox prior to 2.0.0.8 and SeaMonkey prior to 1.1.5 allows remote malicious users to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.

Mozilla Firefox Mozilla Seamonkey Microsoft Internet Explorer 7.0.5730.11

Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote malicious users to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one v...

Microsoft Internet Explorer 5 Microsoft Internet Explorer 5.2.3 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0.2600 Microsoft Internet Explorer 6.0.2800 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0.5730.11 Microsoft Internet Explorer 5.01 Microsoft Ie 5.x Microsoft Internet Explorer 6.0.2900.2180 Microsoft Ie 6.0 Microsoft Internet Explorer 6.0.2800.1106 Microsoft Internet Explorer 6.0.2900 Microsoft Internet Explorer 5.1 Microsoft Internet Explorer 6 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 7

Microsoft Internet Explorer 5.01 through 7 allows remote malicious users to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitializ...

Microsoft Internet Explorer 5 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0.2800 Microsoft Internet Explorer 6.0.2800.1106 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0.5730.11 Microsoft Internet Explorer 5.01 Microsoft Internet Explorer 6.0.2900 Microsoft Internet Explorer 6.0.2900.2180 Microsoft Ie 5.x Microsoft Internet Explorer 6 Microsoft Ie 6.0 Microsoft Internet Explorer 5.1 Microsoft Internet Explorer 5.2.3 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 6.0.2600 Microsoft Internet Explorer 7

Microsoft Internet Explorer 6 and 7 does not initialize certain data structures during execution of the createElement method, which allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code, as demonstr...

Microsoft Internet Explorer 6.0.2800 Microsoft Internet Explorer 6.0.2800.1106 Microsoft Internet Explorer 6.0.2900 Microsoft Internet Explorer 6.0.2900.2180 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0.2600 Microsoft Internet Explorer 6.00.2462.0000 Microsoft Internet Explorer 6.00.2600.0000 Microsoft Internet Explorer 6.00.3790.3959 Microsoft Internet Explorer 7.0.5730.11 Microsoft Internet Explorer 7.00.6000.16386 Microsoft Internet Explorer 6.00.2900.2180 Microsoft Internet Explorer 6.00.3663.0000 Microsoft Internet Explorer 6.00.3718.0000 Microsoft Internet Explorer 6.00.3790.0000 Microsoft Internet Explorer 6.00.3790.1830 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 6.00.2479.0006 Microsoft Internet Explorer 6.00.2800.1106 Microsoft Internet Explorer 7.0.5730 Microsoft Internet Explorer 7.00.5730.1100 Microsoft Internet Explorer 7.00.6000.16441

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote malicious users to bypass Protected Mode or cause a denial of service (memory corruption) by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanS...

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook