CVE-2014-8985

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-282...

CVE-2014-4066

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, CVE-2014-2802, and...

EUVD-2014-3997

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2787, CVE-2014-2790, CVE-2014-2802, and...

CVE-2014-8985

Microsoft Internet Explorer 11 contains a memory corruption vulnerability (CVE-2014-8985) that can be exploited remotely by visiting a crafted site, potentially enabling arbitrary code execution or memory-based denial of service. Public exploits exist; exploitation details are not provided in the...

CVE-2014-4112

CVE-2014-4112 affects Microsoft Internet Explorer 11 and is described as a memory corruption vulnerability that can allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. The CVSSv3 vector indicates NETWORK attack vector, HIGH impact on confidentiali...

CVE-2014-4112

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0304...

CVE-2014-4145

CVE-2014-4145 corresponds to a memory-corruption vulnerability in Microsoft Internet Explorer (IE 6–11), with IE11 specifically affected by a crafted web site that can lead to remote code execution or a denial of service. The root cause is memory corruption triggered by a crafted page, enabling a...

CVE-2014-4066

CVE-2014-4066 corresponds to a memory corruption vulnerability in Microsoft Internet Explorer 11 that can be triggered by visiting a crafted web site, potentially allowing remote code execution or memory corruption leading to a denial of service. The description in multiple sources identifies IE1...

KLA11192 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA11191. Original advisories ADV180004 Related products Microsoft-Windows CVE list KB list 4074595 Solution Install necessary updates from the KB section, that are listed in your Windo...

Attackers Exploiting Unpatched Flaw in Flash

Adobe warned on Thursday that attackers are exploiting a previously unknown security hole in its Flash Player software to break into Microsoft Windows computers. Adobe said it plans to issue a fix for the flaw in the next few days, but now might be a good time to check your exposure to this...

Adobe Flash Player Zero-Day Spotted in the Wild

The South Korean Computer Emergency Response Team issued a warning Wednesday of a new Adobe Flash Player zero-day spotted in the wild. The security bulletin warns that the attacks are focused on South Koreans and involve malicious Microsoft Word documents. According to the South Korean Computer...

January 31, 2018 – Morning Cyber Coffee Headlines – “Explorer 1” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 31, 2018 - Headlines Carbon Black in the News: Beyond 100 Days - BBC...

Lorex LH300 Series - ActiveX Buffer Overflow (PoC) Exploit

Exploit for hardware platform in category dos / poc Buffer overflow vulnerability that allows remote code execution in an ActiveX control bundled by a manufacturer of video surveillance systems. The company is Lorex Technologies, a major video surveillance manufacturer that is very popular in the...

CVE-2017-14803

In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO connector plugins on IE11 where an attacker can execute arbitrary code on the system...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...

Vulnerability of the JavaScript ChakraCore kernel, Internet Explorer and Microsoft Edge browsers, related to improper handling of objects in memory, allowing attackers to gain control of the current user’s rights

The vulnerability of JavaScript ChakraCore, along with browsers Internet Explorer and Microsoft Edge, is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...

The vulnerability of the Microsoft HeartbeatCtl ActiveX control implemented in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft HeartbeatCtl ActiveX control HRTBEAT.OCX in Internet Explorer is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the “Host” parameter...

The vulnerability in Internet Explorer, caused by an operation that goes beyond the buffer boundaries in memory, allows a malicious actor to gain the privileges of the current user.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges as the current user...

Vulnerability of the JavaScript ChakraCore kernel, Internet Explorer and Microsoft Edge browsers, caused by operations beyond the buffer in memory, allowing attackers to gain control of the current user’s rights

The vulnerability in the JavaScript ChakraCore engine, as well as in browsers Internet Explorer and Microsoft Edge, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain privileges of the current user...