92 matches found
Internet Explorer zero-day exploit used watering hole attacks to target Japanese users
Attackers exploiting a zero-day vulnerability CVE-2013-3893 in Microsoft’s Internet Explorer browser and served them on compromised popular Japanese news websites. According to FireEye, at least three major Japanese media websites were compromised in watering hole attacks, dubbed Operation...
CVE-2013-3893
creationtimestamp| type| source ---|---|--- 2013-09-23 06:42:04+00:00| seen| MISP/523fe1fc-b5bc-45c1-be1f-5aceac1d4fa4 2013-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28682 2013-10-07 14:11:56+00:00| seen| MISP/5252bfa9-bf0c-498a-b4c8-d249950d2109 2013-10-09...
Microsoft issues Emergency Fix for Internet Explorer zero-day exploit
All supported versions of Internet Explorer are vulnerable to a zero-day Exploit that is currently being exploited in targeted attacks against IE 8 and IE 9, dubbed "CVE-2013-3893 MSHTML Shim Workaround". Microsoft confirmed that the flaw was unknown before the attacks and that it is already...
CVE-2013-3893
CVE-2013-3893 is a use-after-free in mshtml.dll (Internet Explorer) specifically in SetMouseCapture, exploited via crafted JavaScript (notably through ms-help URLs) to achieve remote code execution across IE 6–11. Connected KEV/CISA entries confirm active exploitation in the wild and classify it ...
Microsoft issues Emergency Fix for Internet Explorer zero-day exploit
All supported versions of Internet Explorer are vulnerable to a zero-day Exploit that is currently being exploited in targeted attacks against IE 8 and IE 9, dubbed "CVE-2013-3893 MSHTML Shim Workaround". Microsoft confirmed that the flaw was unknown before the attacks and that it is already...
Microsoft IE MSHTML内存破坏远程代码执行漏洞(CVE-2013-3893)
No description provided by source...
Microsoft Releases Security Advisory for Internet Explorer
Microsoft has released Security Advisory 2887505 regarding a remote code execution vulnerability CVE-2013-3893 impacting Internet Explorer versions 6 through 11. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability in Internet Explorer 8 and Internet Explorer 9. The...
Microsoft Internet Explorer SetMouseCapture Use-After-Free
Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help. URL that triggers loading of hxds.dll. Recent...
Microsoft Internet Explorer Memory Corruption (CVE-2013-3893)
A remote code execution vulnerability has been reported in Internet Explorer...
MS KB2887505: Vulnerability in Internet Explorer Could Allow Remote Code Execution
The remote host is missing one of the workarounds referenced in KB 2887505. The remote version of Internet Explorer IE reportedly has a memory corruption vulnerability related to how IE accesses an object in memory that has been deleted or has not been properly allocated. By exploiting this flaw,...
CVE-2012-3893
The CVE identifies a vulnerability in Cisco IOS FlexVPN: FlexVPN in IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke-to-spoke traffic (Bug ID CSCtz02622). Affected product: Cisco IOS with FlexVPN functionality; attack vector is network-expos...
Design/Logic Flaw
The renderline function in the vorbis codec vorbis.c in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted Vorbis file, related to a large multiplier. NOTE: this vulnerability exists because of...
Mandriva Update for ffmpeg MDVSA-2012:075 (ffmpeg)
Check for the Version of ffmpeg OpenVAS Vulnerability Test Mandriva Update for ffmpeg MDVSA-2012:075 ffmpeg Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2012:075)
Multiple vulnerabilities has been found and corrected in ffmpeg : The Matroska format decoder in FFmpeg does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file CVE-2011-3362, CVE-2011-3504. cavsdec.c in libavcodec in FFmpeg allows remote...
Gentoo Security Advisory GLSA 201111-05 (chromium v8)
The remote host is missing updates announced in advisory GLSA 201111-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Google Chrome Multiple Vulnerabilities - November11 (Mac OS X)
The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov11macosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Vulnerabilities - November11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c...
CVE-2011-3893
Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...
CVE-2011-3893
CVE-2011-3893 is described in connected advisories as affecting FFmpeg (libavcodec) with vulnerable MKV and Vorbis media handlers. The vulnerability allows a remote attacker to trigger an out-of-bounds read via crafted media input, resulting in denial of service (application crash or partial avai...
Stable Channel Update
The Stable channel has been updated to 15.0.874.120 for Windows, Mac, Linux and Chrome Frame platforms All Updated V8 - 3.5.10.23 Fix small print sizing issues issues: 102186, 82472, 102154 This new build also contains a new version of Flash which contains security fixes. Release Notes Mac Fixed...
CVE-2010-3893
The CVE-2010-3893 issue affects IBM OmniFind Enterprise Edition 8.x/9.x, where the session ID (SID) is not bound to an IP address, enabling session impersonation after cookie theft (e.g., via CVE-2010-3890). This allows an attacker to perform administrative actions from any machine reaching the a...