KLA10967 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure...

KLA10974 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10973. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

PT-2017-1646 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code or cause a denial of service memory corruption via a specially crafted...

PT-2017-1653 · Microsoft · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to the handling of objects in memory, which could allow a remote attacker to obtain confidential information from a process's memory using a specially crafted...

PT-2017-1654 · Microsoft · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to a lack of protection for internal data. It may allow a remote attacker to obtain confidential information from the process memory, cause a denial of servic...

PT-2017-1575 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Internet Explorer. An attacker could exploit this to gain access to confidential information from the process...

PT-2017-1577

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 9 through 11 Description The issue is caused by a buffer overflow in the scripting engine of Internet Explorer, allowing remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

Microsoft Internet Explorer CVE-2017-0040 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Internet Explorer CVE-2017-0149 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Internet Explorer CVE-2017-0059 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer ...

Microsoft Internet Explorer CVE-2017-0018 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Internet Explorer and Edge CVE-2017-0009 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Edge...

Microsoft Internet Explorer and Edge CVE-2017-0033 Spoofing Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected...

Microsoft Internet Explorer and Edge CVE-2017-0012 Spoofing Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected...

Microsoft Internet Explorer CVE-2017-0008 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer ...

Microsoft Internet Explorer CVE-2017-0154 Remote Privilege Escalation Vulnerability

Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 11 is vulnerable. Technologies Affected Microsoft Internet Explorer 11...

Microsoft Internet Explorer CVE-2017-0049 Scripting Engine Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 11 is vulnerable. Technologies Affected Microsoft Internet Explorer 11...

MS17-006: Cumulative security update for Internet Explorer: March 14, 2017

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.Summary This security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code executio...

Microsoft Browser Spoofing (MS17-006: CVE-2017-0033)

A website spoofing vulnerability exists in Microsoft Internet Explorer and Edge. This vulnerability is due to improper access restrictions in the ms-appx-web protocol when accessing the Blocksite.htm resource. A remote, unauthenticated attacker could exploit this vulnerability by redirecting the...

Microsoft Internet Explorer Information Disclosure (MS17-006: CVE-2017-0059)

Information disclosure vulnerabilities exists in Microsoft Internet Explorer. This vulnerability is due to improper handling of objects in memory. A successful exploitation could result in an out-of-bounds read and access to private user data...