A minor security vulnerability exists in the way that Firefox handles cross-domain image dragging. Versions 1.0.0 and 1.0.1 are affected.
e69c09bb958643390aa2585b90789ea5Internet Explorer HTML Help Control Local Zone bypass exploit that can be used against Microsoft Windows XP versions SP2 and below.
5aabc81cc7ff559369ba72b039815c3aThe MSIE DHTML Edit Control code is susceptible to a cross site scripting vulnerability.
9c3baf704ca21a29a37a183efed45be2IEXPLORE.EXE file version 6.0.2800.1106 and MSHTML.DLL file version 6.00.2800.1400 are both susceptible to cross site/zone scripting flaws.
62af020bb2b5a7828cbf938a1d3c540fMicrosoft Internet Explorer gives too much trust to the location variant when it comes to method cache.
469715a18eec5605c5fa0574ec75369dMicrosoft Hotmail is vulnerable to a cross site scripting attack.
80b6dd7c85dfd7eacfd338e20360387fMicrosoft Outlook Express is susceptible to a vulnerability which will allow javascript to be execute in the message window. Tested against Microsoft Outlook Express version 6.0.2800.1123 on Microsoft Windows XP SP2.
87124c0d6ea2dbfd512293c0b3b23bbeA flaw exists in Windows Media Player that allows a malicious asx file to be executed running javascript in a local zone. Tested against MSDXM.DLL file version 6.4.09.1128 on Microsoft Windows 2000.
d9d57e639a404636401e7610d05eb4feA flaw in Microsoft Internet Explorer allows malicious remote users the ability to manipulate access controls in popup.show() resulting in executable mouse click actions.
8c4fa0dc9ad741010e4495ed7f881881MSIE suffers from a file spoofing vulnerability that tricks the browser into opening a file as something it is not. Tested against: IEXPLORE.EXE file version 6.0.2800.1106, MSHTML.DLL file version 6.00.2800.1400, Microsoft Windows XP SP2.
48599a0108bb178a60949e77da86e6ff