PT-2014-7194

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 10 Description A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code in the context of the current user. If t...

PT-2014-7161

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 9 Description A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code in the context of the current use...

PT-2014-7158

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Description Remote code execution issues exist due to improper memory object access in Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of...

PT-2014-7168

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 10 through 11 Description A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code in the context of th...

Microsoft Internet Explorer CTableOMRowCache Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

kernel: futex: refcount issue in case of requeue

A flaw was found in the way the Linux kernel's futex subsystem handled reference counting when requeuing futexes during futexwait. A local, unprivileged user could use this flaw to zero out the reference counter of an inode or an mm struct that backs up the memory area of the futex, which could...

Microsoft Windows内核'Win32k.sys'本地权限提升漏洞(CVE-2014-0300)

BUGTRAQ ID: 66003 CVECAN ID: CVE-2014-0300 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核模式驱动程序没有正确处理内存对象，在实现上存在权限提升漏洞。恶意利用后可导致权限提升并读取任意大小的内核内存。 0 Microsoft Windows XP Home Edition Microsoft Windows Windows XP Professional Microsoft Windows Windows Server 2012 Microsoft Windows Vista Microsoft Windows...

Microsoft VBScript 远程代码执行漏洞(CVE-2014-0271)(MS14-010)

BUGTRAQ ID: 65395 CVECAN ID: CVE-2014-0271 Internet Explorer是微软公司推出的一款网页浏览器。 VBScript引擎除了内存对象时存在远程代码执行漏洞。该漏洞可破坏内存，使攻击者可以在当前用户上下文中执行任意代码。 0 Microsoft Internet Explorer 6-11 临时解决方法： 设置互联网和内联网安全区域设置为“高” 配置IE在运行活动脚本之前提示或直接禁用。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS14-010）以及相应补丁:...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-3881)(MS13-081)

BUGTRAQ ID: 62830 CVECAN ID: CVE-2013-3881 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核模式驱动程序处理内存对象时存在本地权限提升漏洞，成功利用后可在内核模式中运行任意代码。 0 Microsoft Windows XP Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 200...

PT-2014-3557

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access in Internet Explorer. This could lead to memory corruption, allowing an attacker to execute...

PT-2013-5351

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 7 Description A remote code execution issue exists due to improper memory object access, potentially leading to memory corruption and allowing an attacker to execute arbitrary code in the context of the...

PT-2013-4737

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 9 through 11 Description A remote code execution issue exists due to improper memory object access, potentially leading to memory corruption and allowing an attacker to execute arbitrary code in the context...

PT-2013-4715

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the...

PT-2013-4714

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the...

PT-2013-4705

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access in Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the...

PT-2013-4215

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the...

PT-2013-4212

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 8 through 9 Description A remote code execution issue exists due to improper memory object access, potentially leading to memory corruption. This could allow an attacker to execute arbitrary code in the...

CVE-2013-1340

CVE-2013-1340 is a Windows kernel local privilege-escalation vulnerability in the Win32k.sys component (Win32k Dereference Vulnerability). The flaw occurs in memory object handling within the Win32k kernel-mode driver and affects multiple Windows platforms including XP SP2/SP3, Server 2003 SP2, V...

PT-2013-4174 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue arises from Internet Explorer improperly accessing an object in memory, leading to potential remote code execution. This could result in memory corruption, allowing an...

PT-2013-4148

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the...