CVE-2018-0762

CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...

CVE-2018-0762

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in th...

CVE-2018-0772

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in th...

CVE-2018-0762: Out-of-bounds Write

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in th...

CVE-2018-0772: Out-of-bounds Write

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in th...

Security Updates for Internet Explorer (January 2018)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corru...

Microsoft Internet Explorer Multiple Vulnerabilities (KB4056568)

This host is missing a critical security update according to Microsoft security updates KB4056568 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Internet Explorer help

None None...

January 4, 2018—KB4056894 (Monthly Rollup)

None None...

January 4, 2018—KB4056896 (Monthly Rollup)

None None...

January 8, 2018—KB4056895 (Monthly Rollup)

None None...

Microsoft Internet Explorer and Edge CVE-2018-0762 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

Vulnerability of Microsoft Edge and Internet Explorer browsers, caused by executing operations outside the buffer in memory, allowing attackers to gain control of the current user’s privileges and execute arbitrary code.

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by an operation that goes beyond the buffer boundaries in memory a memory object handling error. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain administrative privileges of the current...

Vulnerability of the JavaScript ChakraCore kernel, Microsoft Edge and Internet Explorer browsers, caused by operations beyond buffer boundaries in memory, allowing attackers to gain control of the current user’s privileges and execute arbitrary code.

The vulnerability of JavaScript ChakraCore, as well as Microsoft Edge and Internet Explorer browsers, is caused by an operation that goes beyond the buffer boundaries in memory a memory object handling error. Exploiting this vulnerability can allow a remote attacker to gain administrative...

Vulnerability of the JavaScript ChakraCore kernel, Microsoft Edge and Internet Explorer browsers, caused by operations beyond buffer boundaries in memory, allowing attackers to gain control of the current user’s privileges and execute arbitrary code.

The vulnerability of JavaScript ChakraCore, as well as Microsoft Edge and Internet Explorer browsers, is caused by an operation that goes beyond the buffer boundaries in memory a memory object handling error. Exploiting this vulnerability can allow a remote attacker to gain administrative...

Windows: use-after-free in jscript!NameTbl::GetValDef(CVE-2017-11903)

There is a use-after-free vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - An attacker on the local network could exploit this issue by posing as a WPAD Web Proxy Auto-Discovery host and sending a malicious wpad.dat file to the victim. This works...

Windows: Uninitialized variable in jscript!JsArraySlice(CVE-2017-11855)

There is an uninitialized variable vulnerability in jscript.dll. This issue could potentially be exploited through multiple vectors: - By opening a malicious web page in Internet Explorer. - currently untested An attacker on the local network could exploit this issue by posing as a WPAD Web Proxy...

Microsoft Internet Explorer Scripting Engine Information Disclosure (CVE-2017-11906)

An information disclosure vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way the scripting engine improperly handles objects in memory in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with ...

Microsoft Windows - jscript!JsArraySlice Uninitialized Variable

Microsoft Windows - jscript!JsArraySlice Uninitialized Variable var x = new URIErrornew Array, undefined, undefined; String.prototype.localeCompare.callx, new Date0, 0, 0, 0, 0, 0, undefined; Array.prototype.slice.call1; !-- ============================================ Technical details: The issu...

Microsoft Internet Explorer 11 - jscript!JSONStringifyObject Use-After-Free

Microsoft Internet Explorer 11 - jscript!JSONStringifyObject Use-After-Free var o1 = toJSON:function alert'o1'; return o2; var o2 = toJSON:function alert'o2'; CollectGarbage; return 'x'; JSON.stringifyo1; g df8.e48: Access violation - code c0000005 first chance First chance exceptions are reporte...