8 matches found
CVE-2020-1349
CVE-2020-1349 该漏洞存在于安装于韩文 Windows 10 1909 x64（代码页 949）上的 Outlook 2019（16.0.12624.20424）中。 概览 我尚未能利用此漏洞绕过 ASLR，但我编写了一个 Outlook 2019 32 位漏洞利用程序，通过使用启动时固定的系统库地址弹出一个计算器。 此外，该漏洞为零点击漏洞。如果除“outlook.com”账户以外的邮件服务账户通过 IMAP 与 Outlook 2019 关联，则仅通过接收邮件即可触发。 第一个漏洞 root@kitploit: v26 = IsDBCSLeadBytev13; v12 =...
Description of the security update for Excel 2016: February 11, 2020
None None...
[Full-disclosure] Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...
Microsoft Internet Explorer Double Byte Character Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to an error in how double-byte character set DBCS characters are handled in Internationalized Domain Names IDN included in URLS from rendered HTML content. An attacker could exploit this issue v...
CVE-2004-0844
CVE-2004-0844 describes an address bar spoofing vulnerability in Internet Explorer 6 on Double Byte Character Set (DBCS) locales. A canonicalization error in how IE parses certain characters in an HTTP URL could cause the address bar to display a different URL from the actual loaded page, enablin...