26373 matches found
Code injection
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type...
CVE-2017-3935
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type...
CVE-2017-3935
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type...
CVE-2017-3935
CVE-2017-3935 affects McAfee Network Data Loss Prevention (NDLP). All connected sources describe a MIME type sniffing vulnerability where the response body could be interpreted/displayed as a content type different from the intended one, potentially impacting how IE renders the content. The root ...
CVE-2017-3935: Exposure of Sensitive Information to an Unauthorized Actor
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the intended content type...
PT-2017-16171
Name of the Vulnerable Software and Affected Versions Network Data Loss Prevention affected versions not specified Description The issue concerns MIME type sniffing, which can be exploited by older versions of Internet Explorer to interpret the response body as a different content type than...
Windows Attachment Manager Incorrect High Risk JAR Handling Vulnerability
The Windows Attachment Manager does not correctly handle JAR files marked as high risk when accessed via Internet Explorer 11. Scenario: The Windows Attachment Manager does not correctly handle JAR files marked as "high risk" when accessed via Internet Explorer 11. This leads to direct execution ...
WePay: [stage-go.wepay.com] XSS via Request URI
PoC Open URL in Internet Explorer. This vulnerability only works in Internet Explorer and possibly in Edge, since it is necessary to send a Request-URI without a URL Encode, which is only possible in this browser via redirect...
Microsoft Internet Explorer 11 (Windows 7 x86) - mshtml.dll Remote Code Execution (MS17-007)
Microsoft Internet Explorer 11 Windows 7 x86 - mshtml.dll Remote Code Execution MS17-007 .class1 float: left; column-count: 5; .class2 column-span: all; columns: 1px; table border-spacing: 0px; var ntdllBase = ""; function infoleak var textarea = document.getElementById"textarea"; var frame =...
The vulnerabilities of Microsoft Edge and Internet Explorer involve improper memory management by JavaScript mechanisms when displaying content, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Edge and Internet Explorer relates to the improper handling of memory objects by JavaScript mechanisms when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially...
October 17, 2017—KB4043961 (OS Build 16299.19)
None None...
The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows attackers to execute arbitrary code.
The vulnerability of the Internet Explorer browser is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...
The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Internet Explorer browser in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold versions 1511, 1607, 1703, and Windows Server 2016 is related to incorrect handling of objects in memory. Exploiting...
The vulnerabilities of Microsoft Edge and Internet Explorer involve improper handling of objects in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Edge and Internet Explorer is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that causes memory corruption upon...
The vulnerabilities of Microsoft Edge and Internet Explorer involve improper memory management by JavaScript mechanisms when displaying content, allowing attackers to execute arbitrary code.
Vulnerability of browsers Internet Explorer and Microsoft Edge, where JavaScript memory-management mechanisms malfunction when displaying content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...
October 10, 2017—KB4041689 (OS Build 10586.1176)
None None...
October 10, 2017—KB4041693 (Monthly Rollup)
None None...
October 10, 2017—KB4041691 (OS Build 14393.1770)
None None...