CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 1CVE-2005-2304
https://notcve.org/view.php?id=CVE-2005-2304
Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC Profile with a large Tag Count. Microsoft MSN Messenger 9.0 e Internet Explorer 6.0 permiten que atacantes remotos causen una denegación de servicio (caída) mediante una imagen con un ICC Profile con un Tag Count grande. • http://www.securityfocus.com/archive/1/405377 http://www.securityfocus.com/bid/14288 •
CVSS: 2.6EPSS: 5%CPEs: 1EXPL: 2CVE-2005-2274
https://notcve.org/view.php?id=CVE-2005-2274
Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability." • http://secunia.com/advisories/15491 http://secunia.com/advisories/15492 http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test http://secunia.com/secunia_research/2005-9/advisory http://www.microsoft.com/technet/security/advisory/902333.mspx •
CVSS: 5.0EPSS: 96%CPEs: 11EXPL: 1CVE-2005-2087 – Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow
https://notcve.org/view.php?id=CVE-2005-2087
Internet Explorer 5.01 SP4 up to 6 on various Windows operating systems, including IE 6.0.2900.2180 on Windows XP, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not ActiveX controls, as demonstrated using the JVIEW Profiler (Javaprxy.dll). NOTE: the researcher says that the vendor could not reproduce this problem. • https://www.exploit-db.com/exploits/1079 http://marc.info/?l=bugtraq&m=112006764714946&w=2 http://secunia.com/advisories/15891 http://securitytracker.com/id?1014329 http://www.auscert.org.au/render.html?it=5225 http://www.kb.cert.org/vuls/id/939605 http://www.kb.cert.org/vuls/id/959049 http://www.microsoft.com/technet/security/advisory/903144.mspx http://www.osvdb.org/17680 http://www.securityfocus.com/archive/1/404055 http://www.securityfocus.com/bid/ • CWE-399: Resource Management Errors •
CVSS: 5.1EPSS: 69%CPEs: 1EXPL: 0CVE-2005-1211
https://notcve.org/view.php?id=CVE-2005-1211
Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted PNG file. • http://securitytracker.com/id?1014201 http://www.kb.cert.org/vuls/id/189754 http://www.securityfocus.com/bid/13941 http://www.us-cert.gov/cas/techalerts/TA05-165A.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-025 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1115 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1239 https://oval.cisecurity.org/repository/search/definition/oval •
CVSS: 2.6EPSS: 97%CPEs: 2EXPL: 1CVE-2005-1790 – Microsoft Internet Explorer - JavaScript OnLoad Handler Remote Code Execution (MS05-054)
https://notcve.org/view.php?id=CVE-2005-1790
Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability." • https://www.exploit-db.com/exploits/18365 http://marc.info/?l=bugtraq&m=111746394106172&w=2 http://marc.info/?l=bugtraq&m=111755552306013&w=2 http://secunia.com/advisories/15368 http://secunia.com/advisories/15546 http://secunia.com/advisories/18064 http://secunia.com/advisories/18311 http://securitytracker.com/id?1015251 http://support.avaya.com/elmodocs2/security/ASA-2005-234.pdf http://www.computerterrorism.com/research/ie/ct21-11-2005 http://www.kb.cert.org/ • CWE-399: Resource Management Errors •