漏洞描述 Microsoft Internet Explorer是美国微软(Microsoft)公司发布的Windows操作系统中默认捆绑的Web浏览器。 Microsoft Internet Explorer 6至9版本在处理畸形的Link对象属性操作时会触发非预期的对象访问,导致非法访问内存,可能最终引发IE进程崩溃或执行任意指令。远程攻击者可通过诱使用户访问包含恶意内容的网页在用户系统上执行任意代码,从而控制用户系统。
相关漏洞推荐 (CVE-2025-53770)Microsoft SharePoint Server反序列化漏洞允许远程代码执行 POC CVE-2019-0604: Microsoft SharePoint - Remote Code Execution POC CVE-2020-0646: Microsoft .NET Framework - Remote Code Execution POC CVE-2000-0114: Microsoft FrontPage Extensions - Information Disclosure POC CVE-2008-1547: Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection POC CVE-2015-1635: Microsoft Windows 'HTTP.sys' - Remote Code Execution POC CVE-2018-2392: SAP Internet Graphics Server (IGS) - XML External Entity Injection POC CVE-2020-0618: Microsoft SQL Server Reporting Services - Remote Code Execution POC CVE-2020-16952: Microsoft SharePoint - Remote Code Execution POC CVE-2021-26855: Microsoft Exchange Server SSRF Vulnerability POC CVE-2021-31195: Microsoft Exchange Server - Cross-Site Scripting POC CVE-2021-36646: KodExplorer - Cross-Site Scripting POC CVE-2021-38647: Microsoft Open Management Infrastructure - Remote Code Execution