27 matches found
New Zero-Day Vulnerability CVE-2014-1776 Affects all Versions of Internet Explorer Browser
Microsoft confirmed a new Zero Day critical vulnerability in its browser Internet Explorer. Flaw affects all versions of Internet Explorer, starting with IE version 6 and including IE version 11. In a Security Advisory 2963983 released yesterday, Microsoft acknowledges a zero-day Internet Explore...
MS14-009 .NET Deployment Service IE Sandbox Escape
This module abuses a process creation policy in Internet Explorer's sandbox, specifically in the .NET Deployment Service dfsvc.exe, which allows the attacker to escape the Enhanced Protected Mode, and execute code with Medium Integrity. Module Options msf use exploit/windows/local/ms14/009iedfsvc...
MS13-097 Registry Symlink IE Sandbox Escape
This module exploits a vulnerability in Internet Explorer Sandbox which allows to escape the Enhanced Protected Mode and execute code with Medium Integrity. The vulnerability exists in the IESetProtectedModeRegKeyOnly function from the ieframe.dll component, which can be abused to force medium...
Microsoft Internet Explorer Enhanced Protected Mode CVE-2013-5046 Security Bypass Vulnerability
Description Microsoft Internet Explorer is prone to a security-bypass vulnerability in the Enhanced Protected Mode. An attacker can exploit this issue to bypass Enhanced Protected Mode restrictions and execute arbitrary code with elevated privileges. Technologies Affected Avaya Aura Conferencing...
CVE-2013-4015
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the 1 Protected Mode or 2 Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code...
Privilege escalation
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the 1 Protected Mode or 2 Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code...
CVE-2013-4015
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the 1 Protected Mode or 2 Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code...