5613 matches found
CVE-2014-6362
Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."...
Design/Logic Flaw
Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."...
CVE-2015-0069
Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...
CVE-2015-0051
Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...
CVE-2015-0071
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...
CVE-2015-0071
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...
CVE-2014-6362
Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."...
CVE-2014-6362
CVE-2014-6362 is a use-after-free vulnerability in Microsoft Office components that enables ASLR bypass when a crafted document is opened. Affected products include Office 2007 SP3, Office 2010 SP2, and Office 2013 (Gold/SP1). The underlying issue relates to improper handling of memory in shared ...
CVE-2015-0069
CVE-2015-0069 affects Internet Explorer 10 and 11 and is described as an ASLR bypass vulnerability that can be triggered by visiting a crafted webpage, enabling a remote attacker to bypass address space layout randomization and potentially execute code. Public exploits exist for this vulnerabilit...
CVE-2015-0051
CVE-2015-0051 is the Internet Explorer ASLR bypass vulnerability affecting IE up to version 11, with IE8 specifically cited in sources. Connected documents confirm this is a security-bypass flaw in IE that can enable code execution through a crafted webpage; MS15-009 patches are the relevant fixe...
CVE-2015-0071
CVE-2015-0071 affects Internet Explorer 9–11. The vulnerability is an ASLR bypass in IE triggered by visiting a crafted web page, per the IE ASLR Bypass vulnerability description. Impact: bypass of address-space layout randomization (ASLR); the Microsoft KB MS15-009 security update family (KB3021...
Microsoft Internet Explorer ASLR Security Bypass Vulnerability (CNVD-2015-01071)
Microsoft Internet Explorer is a popular WEB browser. A security vulnerability exists in Microsoft Internet Explorer ASLR that could allow an attacker to bypass certain security restrictions or execute arbitrary code using another application...
CVE-2015-0071
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka “Internet Explorer ASLR Bypass Vulnerability.” Recent assessments: gwillcox-r7 at November 23, 2020 6:02pm UTC reported: Reported as exploited in the wild as part o...
Microsoft Internet Explorer ASLR Security Bypass Vulnerability (CNVD-2015-01070)
Microsoft Internet Explorer is a popular WEB browser. A security vulnerability exists in Microsoft Internet Explorer ASLR that could allow an attacker to bypass certain security restrictions or execute arbitrary code using another application...
CVE-2015-0071: Undefined Security Weakness
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...
CVE-2015-0069: Undefined Security Weakness
Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...
CVE-2014-6362: Undefined Security Weakness
Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability."...
CVE-2015-0051: Undefined Security Weakness
Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."...
Microsoft Office Security Feature Bypass Vulnerability (3033857)
This host is missing an important security update according to Microsoft Bulletin MS15-013. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Internet Explorer ASLR Bypass (MS15-009: CVE-2015-0069)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...