Security feature bypass

Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."...

CVE-2015-2445

CVE-2015-2445 is an ASLR bypass vulnerability in Microsoft Internet Explorer (IE10 is explicitly noted; IE7–11 are affected per MS15-079/MSKB entries). The issue allows bypass of Address Space Layout Randomization and, in conjunction with other vulnerabilities, could lead to remote code execution...

CVE-2015-2449

Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."...

CVE-2015-2445

Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."...

CVE-2015-2449

CVE-2015-2449 affects Microsoft Internet Explorer (IE) versions 7–11 and Microsoft Edge, with the underlying issue described as an ASLR (Address Space Layout Randomization) bypass by visiting a crafted web page. Technical details in the connected documents confirm affected products and that the v...

CVE-2015-2445: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."...

CVE-2015-2449: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."...

Stagefright Patch Incomplete Leaving Android Devices Still Exposed

Google today released to open source a new patch for the infamous Stagefright vulnerability found in 950 million Android devices after researchers at Exodus Intelligence discovered the original patch was incomplete and Android devices remain exposed to attack. “We’ve already sent the fix to our...

PT-2015-1821

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 7 through 11 Microsoft Edge Description The issue is related to the bypass of the Address Space Layout Randomization ASLR protection mechanism. This allows an attacker to more reliably predict the memory...

PT-2015-1817

Name of the Vulnerable Software and Affected Versions Internet Explorer version 10 Description The issue is related to the lack of protection for service data in Internet Explorer, allowing a remote attacker to bypass the Address Space Layout Randomization ASLR protection mechanism using a...

MS15-084: Vulnerabilities in XML Core Services Could Allow Information Disclosure (3080129)

The remote Windows host contains a version of Microsoft XML Core Services MSXML that is affected by multiple information disclosure vulnerabilities : - An information disclosure vulnerability exists in XML Core Services MSXML due to the use of Secure Sockets Layer SSL 2.0. A man-in-the-middle...

PT-2015-5748

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services versions 3.0 through 6.0 Description An information disclosure issue exists when Microsoft XML Core Services exposes memory addresses not intended for public disclosure. This could allow an attacker to bypass Addres...

Microsoft Internet Explorer and Edge CVE-2015-2449 ASLR Security Bypass Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. The following products are vulnerable:...

MS15-091: Cumulative Security Update for Microsoft Edge (3084525)

The version of Microsoft Edge installed on the remote host is missing Cumulative Security Update 3081436. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper access to objects in memory resulting from insufficient validation of...

Microsoft Internet Explorer CVE-2015-2445 ASLR Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Internet Explorer 10 is vulnerable. Technologies...

Android Stagefright contains multiple vulnerabilities

Overview Stagefright is the media playback service for Android, introduced in Android 2.2 Froyo. Stagefright in versions of Android prior to 5.1.1r9 may contain multiple vulnerabilities, including several integer overflows, which may allow a remote attacker to execute code on the device...

Foxit Reader - .png Conversion Parsing tEXt Chunk Arbitrary Code Execution

Foxit Reader - .png Conversion Parsing tEXt Chunk Arbitrary Code Execution Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link:...

Foxit Reader - PNG Conversion Parsing tEXt Chunk Arbitrary Code Execution Exploit

Foxit Reader versions 7.0.8 through 7.1.5 suffer from a PNG conversion parsing tEXt chunk arbitrary code execution vulnerability. Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage:...

Foxit Reader 7.1.5 Arbitrary Code Execution

Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link: https://www.foxitsoftware.com/downloads/ Version: 7.0.8 - 7.1.5 maybe also older versions tested...

Foxit Reader - '.png' Conversion Parsing tEXt Chunk Arbitrary Code Execution

Exploit Title: Foxit Reader PNG Conversion Parsing tEXt chunk - Arbitrary Code Execution Date: 07/07/2015 Exploit Author: Sascha Schirra Vendor Homepage: https://www.foxitsoftware.com Software Link: https://www.foxitsoftware.com/downloads/ Version: 7.0.8 - 7.1.5 maybe also older versions tested...