Show filters
61 Total Results
Displaying 31-40 of 61
Sort by:
Attacker Value
Unknown
CVE-2004-0201
Disclosure Date: August 06, 2004 (last updated February 22, 2025)
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
0
Attacker Value
Unknown
CVE-2003-1048
Disclosure Date: July 27, 2004 (last updated February 22, 2025)
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.
0
Attacker Value
Unknown
CVE-2004-0123
Disclosure Date: June 01, 2004 (last updated February 22, 2025)
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
0
Attacker Value
Unknown
CVE-2003-0469
Disclosure Date: August 07, 2003 (last updated February 22, 2025)
Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag.
0
Attacker Value
Unknown
CVE-2003-0010
Disclosure Date: March 24, 2003 (last updated February 22, 2025)
Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.
0
Attacker Value
Unknown
CVE-2002-2185
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.
0
Attacker Value
Unknown
CVE-2002-1258
Disclosure Date: December 23, 2002 (last updated February 22, 2025)
Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.
0
Attacker Value
Unknown
CVE-2002-1325
Disclosure Date: December 23, 2002 (last updated February 22, 2025)
Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
0
Attacker Value
Unknown
CVE-2002-1257
Disclosure Date: December 23, 2002 (last updated February 22, 2025)
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.
0
Attacker Value
Unknown
CVE-2002-1260
Disclosure Date: December 23, 2002 (last updated February 22, 2025)
The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.
0
