PC Tools - Essential tools for your PC
Search
 
 
Характеристики
 
Newsletter
 
Security Home > Internet Explorer
Java Software
Vulnerabilites in Java Products
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative patch that includes the functionality of all previously released patches for Internet Explorer 5.01, 5.5 and 6.0, in addition, it eliminates two newly discovered vulnerabilities.
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative patch that includes all previously released patches for Internet Explorer 5.01, 5.5 and 6.0. In addition, it eliminates two new vulnerabilities, the most serious of which could enable an attacker to run arbitrary code on a user's system.
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative patch that includes the functionality of all previously released patches for Internet Explorer 5.01, 5.5 and 6.0. In addition, it eliminates two newly discovered vulnerabilities.
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative patch that includes the functionality of all previously released patches for Internet Explorer 5.01, 5.5 and 6.0 and also resolves 4 new security vulnerabilities.
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative patch for Internet Explorer 5, 5.5 and 6. In addition, it eliminates two newly discovered vulnerabilities involving Internet Explorer’s cross-domain security model.
Cumulative Patch for Internet Explorer New
Microsoft have released a cumlative security patch for Microsoft Internet Explorer 5.5 and 6.0 which resolves a new critical vulnerability and also includes previous patches.
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative patch for Internet Explorer that includes the functionality of all previously released patches for IE 5.01, 5.5 and 6.0. In addition, it eliminates the following six newly discovered vulnerabilities.
Buffer Overrun in Microsoft Data Access Components New
A security vulnerability exists in the Microsoft Data Access Components (MDAC) which could allow an attacker to send a specially malformed HTTP request to overrun the buffer and run code of their choice on the system.
Certificate Validation Flaw Could Enable Identity Spoofing New
A critical security flaw in the certificate processing of Microsoft Windows, Office for Mac, Internet Explorer for Mac and Outlook Express for Mac could enable a variety of identity spoofing attacks.
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative security patch for Internet Explorer which resolves six new vulnerabilities, the most serious of which could enable an attacker to execute commands on a user's system.
Cumulative Patch for Internet Explorer New
Microsoft has release a cumulative patch for Internet Explorer which resolves six new vulnerabilities, the most serious of which could allow code of attacker's choice to run.
Unchecked Buffer in Internet Explorer and Office for Macintosh New
An unchecked buffer exists in Internet Explorer and Office applications for Macintosh. The vulnerability may allow an attacker to run the code of their choice on the system.
Cumulative Patch for Internet Explorer New
Microsoft has released a cumulative patch for Internet Explorer that includes the functionality of all previously released patches for IE 5.01, 5.5 and IE 6. In addition, it also eliminates two newly discovered vulnerabilities.
Cross-domain Validation Flaw Can Allow Web Pages to Read Local Files New
A security flaw exists in the cross-domain script validation which should prohibit scripts from accessing the content of frames in another site or domain. This vulnerability may allow a remote attacker to view local files or form information entered into other sites.
Cumulative Patch for Internet Explorer New
Microsoft has release a cumulative patch for Internet Explorer 5.x and 6.0 which eliminates all previously discussed security vulnerabilities and six newly discovered vulnerabilities.
Cumulative Patch for Internet Explorer 5.5 and 6 Released New
Microsoft has released a patch for Internet Explorer 5.5 and 6 which eliminates all previously discussed security vulnerabilities affecting IE 5.5 and 6. In addition, it eliminates three newly discovered vulnerabilities.
Internet Explorer Cookie Data May Be Exposed or Altered New
A security vulnerability exists in Internet Explorer versions 5.5 and 6 that may allow a malicious user to create an URL that allows a Web site to gain unauthorized access to cookies that are stored on a computer and then potentially modify the values that are contained within them.
Downloads Can Automatically Execute on IE 5.1 for Mac OS X New
A security vulnerability exists in Internet Explorer 5.1 for the Macintosh OS X operating system that could allow a downloaded application to automatically execute on completion of the transfer.
Malformed Dotless IP Address Can Cause Web Page to be Handled in Intranet Zone New
Several new security vulnerabilities have been discovered in Internet Explorer 5.01, 5.5 and 6.0 that may allow a malicious user to bypass IE security zone restrictions using a malformed URL.
Flaws in Web Server Certificate Validation Could Enable Spoofing New
Two security vulnerabilities exists in Internet Explorer which could enable an attacker to spoof trusted web sites.
Incorrect MIME Header Can Cause IE to Execute E-mail Attachment New
A security vulnerability exists in Internet Explorer which could allow a remote attacker to run code of attacker’s choice by exploiting a flaw in the MIME type handling function.
Cached Content Identification Vulnerability New
A security vulnerability exists in the Internet Explorer which makes it possible for a web page or HTML e-mail to learn the physical location of cached content.
Browser Print Template and File Upload via Form Vulnerabilities
Four security vulnerabilities exist in Internet Explorer which could enable a malicious web site operator to take unauthorized actions or read files on the computer of a user who visited their site.
VM File Reading Vulnerability
The Microsoft virtual machine (Microsoft VM) includes a security vulnerability that could enable a malicious Web site operator to access the files on a user's computer and, if the user is part of an intranet, to read Web content within that intranet.
Cached Web Credentials Vulnerability
A security vulnerability exists in Microsoft® Internet Explorer which could enable a malicious user to obtain another user’s userid and password to a web site by exploiting cached credentials.
Microsoft VM ActiveX Component Vulnerability
The Microsoft virtual machine (Microsoft VM) includes a security vulnerability that may allow script code in a Web page or HTML-based e-mail message access to ActiveX controls that should not be available in those contexts. This could allow a malicious web site operator to take any desired action on a user's machine.
Scriptlet Rendering Vulnerability
A security vulnerabilities exists in Microsoft® Internet Explorer which could allow a malicious web site operator to read - but not add, change, or delete - files on the computer of a visiting user.
Active Setup Download Vulnerability
A security vulnerability exists in an ActiveX control that ships with Microsoft® Internet Explorer which could be used to overwrite files on the computer of a user who visited a malicious web site operator's site.
SSL Certificate Validation Vulnerabilities
Two security vulnerabilities exist in Microsoft® Internet Explorer that involve how IE handles digital certificates; under a very daunting set of circumstances, they could allow a malicious web site operator to pose as a trusted web site.
HTML Help File Code Execution Vulnerability
A security vulnerability exists in the HTML Help facility that ships with Microsoft® Internet Explorer which could allow a malicious web site to take inappropriate action on the computer of a visiting user.
Frame Domain Verification, Unauthorized Cookie Access and Malformed Component Attribute Vulnerabilities
Three security vulnerabilities exist in Internet Explorer 4 and 5 which could allow a malicious web site operator to read files and cookies or to run code of his choice on the computer of a visiting user.
Image Source Redirect Vulnerability
A security vulnerability exists in Internet Explorer which could allow a malicious Web site operator to view files on your computer when you visit a Web page that contains a JavaScript Uniform Resource Locator (URL) in an IMG (image) tag.
Server-side Page Reference Redirect Vulnerability
A vulnerability exists in Microsoft® Internet Explorer 4.01, 5 and 5.01, that could allow a malicious web site operator to view a file on the computer of a visiting user, provided that the web site operator knew the name and folder of the file.
WPAD Spoofing Vulnerability
Under specific conditions, a vulnerability exists in Internet Explorer 5 that could allow a malicious user to provide proxy settings to web clients in another network.
IE Task Scheduler Vulnerability
A vulnerability exists in an optional component of Internet Explorer 5 that could allow a malicious user to gain additional privileges on a Windows NT machine that allowed him or her to create or change files.
Active Setup Control Vulnerability
A vulnerability exists that could allow a malicious user to embed an unsafe executable within an email and disguise it as a safe type of attachment. Through a complicated series of steps, the unsafe executable could be made to execute under certain conditions, if the user opened the attachment.
Internet Explorer Javascript Redirect Vulnerability
A vulnerability using Javascript Redirect function could allow a malicious web site operator to read files on the computer of a user who visited the site, under certain circumstances.
Internet Explorer IFRAME ExecCommand Vulnerability
A vulnerability in Internet Explorer could allow a malicious web site operator to read files on the computer of a user who visited the site, under certain circumstances.
Internet Explorer Download Behavior Vulnerability
A security vulnerability exists in Microsoft® Internet Explorer 5 that could allow a malicious web site operator to read files on the computer of a person who visited the site.
Internet Explorer "ImportExportFavorites" Vulnerability
A security vulnerability exists in ImportExportFavorites() function of Microsoft® Internet Explorer 5 that could allow a malicious web site operator to take inappropriate action on the computer of a person who visited the site.
ActiveX "scriptlet.typelib/Eyedog" Vulnerability
Security vulnerabilities exist in two ActiveX controls that could all a web page to take unauthorized action against a person who visited it. Specifically, the web page would be able to do anything on the computer that the user could do.
Malformed Favorites Icon and Legacy ActiveX Control Vulnerability
Two security vulnerabilities exist in Microsoft® Internet Explorer 4.0 and 5. The first potentially could allow arbitrary code to be run on a user's computer. The second potentially could allow the local hard drive to be read.
MSHTML Vulnerability in Internet Explorer
Three vulnerabilities exist in the HTML parsing engine for Internet Explorer.
DHTML Edit Vulnerability
A vulnerability exists in an ActiveX control that is distributed in Internet Explorer 5 and downloadable for Internet Explorer 4.0. The vulnerability could allow a malicious web site operator to read information that a user had loaded into the control, and it also could allow files with known names to be copied from the user's local hard drive.
Internet Explorer Frame Spoof Vulnerability
A vulnerability exists in Microsoft® Internet Explorer® that could allow a malicious web site operator to impersonate a window on a legitimate web site. The threat posed by this vulnerability is that the bogus window could collect information from the user and send it back to the malicious site.
Dotless IP Address Issue in Internet Explorer 4
A vulnerability exists with how Internet Explorer 4 determines what security zone a target server is in. By using this vulnerability, a malicious hacker could misrepresent the URL of their website, causing the site to be treated as it if were located on an intranet by Internet Explorer's Security Zones feature.
Untrusted Scripted Paste Issue in Internet Explorer 4.01
The "Untrusted Scripted Paste" vulnerability, also known as the "Cuartango" vulnerability, could enable a malicious web site operator to use scripted paste operations to read a file that resides in a known location on a user's system.
Internet Explorer Cross Frame Navigate Vulnerability
The Cross Frame Navigate issue involves a vulnerability in Internet Explorer that could allow a malicious hacker to circumvent certain Internet Explorer security safeguards. This vulnerability makes it possible for a malicious Web site operator to read the contents of files on your computer.
 
  Авторское право © 1998-2008 гг. PC Tools. Авторские права сохранены. Политика конфиденциальности | Официальное уведомление