PT-2017-3205

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions affected versions not specified Internet Explorer versions affected versions not specified ChakraCore versions affected versions not specified Description A remote code execution issue exists due to improper handling of...

Microsoft Internet Explorer CVE-2017-11869 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Internet Explorer CVE-2017-11848 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer ...

PT-2017-3292

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Internet Explorer affected versions not specified Description The issue is caused by a buffer overflow in the JavaScript ChakraCore engine, which can lead to remote code execution. This could allo...

Windows 7 and Windows Server 2008 R2 November 2017 Security Updates

The remote Windows host is missing security update 4048960 or cumulative update 4048957. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a...

KB4048955: Windows 10 Version 1709 and Windows Server Version 1709 November 2017 Cumulative Update

The remote Windows host is missing security update 4048955. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...

KB4048953: Windows 10 Version 1607 and Windows Server 2016 November 2017 Cumulative Update

The remote Windows host is missing security update 4048953. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests. The vulnerability allows Microsoft Edge to bypass Cross- Origin Resource...

KB4048956: Windows 10 LTSB November 2017 Cumulative Update

The remote Windows host is missing security update 4048956. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...

KB4048952: Windows 10 Version 1511 November 2017 Cumulative Update

The remote Windows host is missing security update 4048952. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an...

Microsoft Internet Explorer CVE-2017-11834 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft...

KLA11855 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. An information...

Microsoft Internet Explorer 11 jscript!JsErrorToString Use-After-Free Exploit

Microsoft Internet Explorer 11 suffers from a use-after-free vulnerability in jscript!JsErrorToString. Microsoft IE11: use-after-free in jscript!JsErrorToString CVE-2017-11810 There is a use-after-free in jscript.dll library that can be exploited in IE11. jscript.dll is an old JavaScript library...

Disdain exploit kit and a side of social engineering deliver Neutrino Bot

Today we picked up new activity from an exploit kit that was first discovered back in August of this year. The Disdain exploit kit, simply identified by a string of the same name found in its source code, is being distributed again after a short interruption via malvertising chains. Disdain EK...

The vulnerability of the Internet Explorer browser, related to improper handling of objects in memory, allows a malicious actor to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted web page...

The vulnerability of the Internet Explorer browser is related to improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to incorrect handling of objects in memory, resulting in operations exceeding the buffer limits of memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using...

Microsoft Internet Explorer 11 - 'jscript!JsErrorToString' Use-After-Free

var e = new Error; var o = toString:function //alert'in toString'; e.name = 1; CollectGarbage; //reallocate forvar i=0;i !-- ========================================= This is a use-after-free in jscript!JsErrorToString that can lead to a heap overflow. The PoC above crashes in memcpy when...

Microsoft Internet Explorer 11 - jscript!JsErrorToString Use-After-Free

Microsoft Internet Explorer 11 - jscript!JsErrorToString Use-After-Free var e = new Error; var o = toString:function //alert'in toString'; e.name = 1; CollectGarbage; //reallocate forvar i=0;i !-- ========================================= This is a use-after-free in jscript!JsErrorToString that c...

Avaya OfficeScan (IPO) Remote ActiveX Buffer Overflow Exploit

Exploit for windows platform in category dos / poc + Credits: John Page aka hyp3rlinx Vendor: ============= www.avaya.com Product: =========== Avaya IP Office IPO v9.1.0 - 10.1 IP Office is Avaya's global midsize solution for enterprises, supporting up to 3,000 users at a single location with IP...

Avaya IP Office (IPO) < 10.1 - ActiveX Buffer Overflow

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AVAYA-OFFICE-IP-IPO-v9.1.0-10.1-VIEWERCTRL-ACTIVE-X-BUFFER-OVERFLOW-0DAY.txt + ISR: ApparitionSec Vendor: ============= www.avaya.com Product: =========== Avaya IP Office IPO...

CVE-2017-3935

Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type...