Vulnerabilities > Microsoft > Internet Explorer

DATE CVE VULNERABILITY TITLE RISK
2006-07-18 CVE-2006-3658 Unspecified vulnerability in Microsoft IE and Internet Explorer
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object, which triggers a null dereference in the security check.
network
low complexity
microsoft
5.0
2006-07-18 CVE-2006-3657 Unspecified vulnerability in Microsoft IE and Internet Explorer
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property.
network
low complexity
microsoft
5.0
2006-07-18 CVE-2006-3605 Unspecified vulnerability in Microsoft Internet Explorer 6.0
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference.
network
low complexity
microsoft
5.0
2006-07-18 CVE-2006-3591 Unspecified vulnerability in Microsoft Internet Explorer 6.0
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocument.TriEditDocument object before it has been initialized, which triggers a NULL pointer dereference.
network
low complexity
microsoft
5.0
2006-07-11 CVE-2006-3513 Unspecified vulnerability in Microsoft IE and Internet Explorer
danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data property of a DirectAnimation DAUserData object before it is initialized, which triggers a NULL pointer dereference.
network
low complexity
microsoft
5.0
2006-07-11 CVE-2006-3512 Unspecified vulnerability in Microsoft Internet Explorer 6.0
Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilter ActiveX object to true, which triggers a null dereference.
network
low complexity
microsoft
5.0
2006-07-11 CVE-2006-3511 Unspecified vulnerability in Microsoft Internet Explorer 6.0
Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the HtmlDlgSafeHelper object, which triggers a null dereference.
network
low complexity
microsoft
5.0
2006-07-10 CVE-2006-3472 Unspecified vulnerability in Microsoft IE and Internet Explorer
Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing a long title attribute.
network
low complexity
microsoft
5.0
2006-07-07 CVE-2006-3427 Unspecified vulnerability in Microsoft Internet Explorer 6.0
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninitialized DirectAnimation.StructuredGraphicsControl ActiveX Object, which triggers a null dereference.
network
low complexity
microsoft
5.0
2006-07-06 CVE-2006-3357 Unspecified vulnerability in Microsoft Internet Explorer 6.0
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings.
network
low complexity
microsoft
7.5