Vulnerabilities > Microsoft > Internet Explorer

DATE CVE VULNERABILITY TITLE RISK
2001-06-02 CVE-2001-0322 Unspecified vulnerability in Microsoft Internet Explorer, Outlook and Outlook Express
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object.
network
low complexity
microsoft
5.0
2001-06-02 CVE-2001-0149 Unspecified vulnerability in Microsoft Internet Explorer
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
network
low complexity
microsoft
5.0
2001-05-11 CVE-2001-1450 Unspecified vulnerability in Microsoft Internet Explorer
Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#./".
network
high complexity
microsoft
2.6
2001-05-03 CVE-2001-0154 Unspecified vulnerability in Microsoft Internet Explorer
HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.
network
low complexity
microsoft
7.5
2001-02-16 CVE-2001-0092 Unspecified vulnerability in Microsoft Internet Explorer 5.0/5.01/5.5
A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the "Frame Domain Verification" vulnerability.
network
high complexity
microsoft
2.6
2001-02-16 CVE-2001-0091 Unspecified vulnerability in Microsoft Internet Explorer
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability.
network
high complexity
microsoft
2.6
2001-02-16 CVE-2001-0090 Unspecified vulnerability in Microsoft Internet Explorer 5.5
The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow an attacker to execute arbitrary ActiveX controls, aka the "Browser Print Template" vulnerability.
network
high complexity
microsoft
5.1
2001-02-16 CVE-2001-0089 Unspecified vulnerability in Microsoft Internet Explorer
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.
network
high complexity
microsoft
2.6
2000-12-19 CVE-2000-0982 Unspecified vulnerability in Microsoft Internet Explorer
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
network
low complexity
microsoft
7.5
2000-10-20 CVE-2000-0768 Unspecified vulnerability in Microsoft IE and Internet Explorer
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.
network
high complexity
microsoft
2.6