CVE-2014-6369

CVE-2014-6369 affects Microsoft Internet Explorer 9–11. A use-after-free in handling CTableSection objects enables remote code execution when a user visits a crafted page; public exploits exist and user interaction is typically required. Remediation ties to MS14-080 (KB 3008923) and related IE up...

CVE-2014-6373

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-6373

CVE-2014-6373 is a remote memory-corruption vulnerability in Microsoft Internet Explorer 10 that allows arbitrary code execution via a crafted web site. Affected product: Internet Explorer 10. Root cause: memory corruption when processing certain web content. Impact per sources: remote code execu...

Microsoft Internet Explorer Multiple Vulnerabilities (3008923)

This host is missing a critical security update according to Microsoft Bulletin MS14-080. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

December 2014 Microsoft Patch Tuesday Security Bulletins

Microsoft exits 2014 the way it came in to the year, with a relatively quiet set of Patch Tuesday security bulletins. As promised last week, Microsoft released seven bulletins today, three of them rated critical, meaning the chance of exploit and remote code execution is high. Microsoft also...

Microsoft Internet Explorer CVE-2014-6327 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

espn.go.com Cross Site Scripting / Open Redirect

ESPN espn.go.com Login & Register Page XSS and Dest Redirect Privilege Escalation Security Vulnerabilities Domain: http://espn.go.com/ "As of August 2013, ESPN is available to approximately 97,736,000 pay television households 85.58% of households with at least one television set in the United...

Mail.ru: [connect.mail.ru] Memory Disclosure / IE XSS

Memory Disclosure ---- При обращении к сценариям https://connect.mail.ru/sharefriends https://connect.mail.ru/sharecount https://connect.mail.ru/sharebutton следующим образом: GET /xxx/%2e%2e/sharefriends HTTP/1.1 Host: connect.mail.ru выводится ошибка о некорректном пути invalid request path:...

ThinkSAAS存储型跨站(2处)

简要描述： ThinkSAAS过滤不严导致存储型跨站。可攻击任意用户包括管理员 详细说明： ThinkSAAS对javascript伪协议进行了过滤，但我们可以利用编码巧妙绕过，导致了以下漏洞的产生。 漏洞证明： 1、涉及版本：thinksaas2.2-beta 2、由于浏览器解析不同，此漏洞的测试环境为Chrome和IE，对Firefox无效。 漏洞一： 3、登录系统，在文章模块发布文章，在文章内容中添加超链接，链接路径为：javascriptalert/xss/ 4、拦截请求，系统会自动添加http协议，将超链接href中的http://去掉...

Microsoft Internet Explorer CElement Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Win95+IE3 – Win10+IE11 full version execution vulnerability-vulnerability warning-the black bar safety net

Microsoft this month's security update fixes a potential of the 1 8 years of IE remote code execution vulnerability, CVE-2 0 1 4-6 3 3 2, You can say Yes to the windows to eat a big Supplement pills. Defects appear in the VBScript code, from Windows 9 5 first published in 1 9 years ago since it h...

Information disclosure

Microsoft Internet Explorer 8 through 11 allows remote attackers to read content from a different 1 domain or 2 zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclosure Vulnerability."...

CVE-2014-6344

CVE-2014-6344 affects Microsoft Internet Explorer 8 and 9. The connected sources describe a remote code execution/memory-corruption vulnerability in IE triggered by visiting a crafted page, with a specific root cause tied to the GetReplacedUrlImgCtxCookie handling (out-of-bounds indexing) as note...

CVE-2014-6347

Microsoft Internet Explorer 11 is affected by CVE-2014-6347 (Memory corruption) which can allow remote code execution via a crafted web page. The root cause involves memory corruption when handling certain objects in IE, enabling code execution in the context of the user. Public exploits exist; r...

CVE-2014-6346

CVE-2014-6346 affects Microsoft Internet Explorer 8–11 and is described as a cross-domain information-disclosure vulnerability. The root cause involves improper enforcement of cross-domain policies that can allow a crafted web page to read content from another domain or security zone. Public expl...

QQ input method pure version 1. 1 The presence of IME vulnerability-vulnerability warning-the black bar safety net

In the login system before, or Telnet before you can open the input method selected help, you can open the IE browser, by saving the page you can open the computer file list. The main is now popular PC end windows 8 system...

CVE-2014-4129

CVE-2014-4129 affects Microsoft Internet Explorer (notably IE8) and is described in connected sources as a remote memory-corruption vulnerability exploitable via a crafted web page. The underlying issue is memory corruption that could allow remote code execution or a denial of service when proces...

CVE-2014-4132

The CVE-2014-4132 entry concerns Microsoft Internet Explorer 11 memory‑corruption vulnerabilities exploitable via a crafted web site, enabling remote code execution or a denial of service. The related connected records show the broader family (CVE-2014-4130 and CVE-2014-4138) and note that CVE-20...

CVE-2014-4130

Technical details for CVE-2014-4130 are not publicly available in the provided documents. Monitor for updates.

MS14-056: Cumulative Security Update for Internet Explorer (2987107)

The remote host is missing Internet Explorer IE Security Update 2987107. The version of Internet Explorer installed on the remote host is affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to...