PT-2013-4148

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the...

PT-2013-3066 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to the way Internet Explorer accesses an object in memory that has been deleted, potentially leading to memory corruption. This could allow an attacker to...

CVE-2013-1347

CVE-2013-1347 (Internet Explorer 8) is a remote code execution vulnerability in IE8 arising from a use-after-free in CGenericElement/mshtml.dll when handling in-memory objects. Exploitation in the wild during 2013 (notably DoL incident) demonstrated remote code execution by visiting a crafted web...

Microsoft RDP ActiveX Control Remote Code Execution Vulnerability (2828223)

This host is missing a critical security update according to Microsoft Bulletin MS13-029. OpenVAS Vulnerability Test $Id: secpodms13-029.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft RDP ActiveX Control Remote Code Execution Vulnerability 2828223 Authors: Veerendra GG Copyright: Copyright c 2013...

Race condition

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling ...

CVE-2013-1285

The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to...

PT-2013-2066 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 7 through 10 Description: The issue allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object. This occurs due to the way Internet Explorer accesses ...

Microsoft .NET Framework 远程权限提升漏洞(CVE-2013-0003)

Bugtraq ID:57114 CVE ID: CVE-2013-0003 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统 Microsoft .NET Framework System.DirectoryServices.Protocols S.DS.P命名空间方法没有正确校验内存中的对象大小，在拷贝这些对象到数组之前缺少正确的边界检查，可触发缓冲区溢出。攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用，诱使用户解析，可完全控制应用系统，执行任意代码 0 Microsoft .NET...

Microsoft .NET Framework 远程权限提升漏洞(CVE-2013-0004)

Bugtraq ID:57113 CVE ID: CVE-2013-0004 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统 Microsoft .NET Framework里存在的一个两次构建错误会导致不正确验证内存中某些对象的权限，攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用，诱使用户解析，可完全控制应用系统，执行任意代码 0 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework...

MS12-036: Vulnerability in Remote Desktop Could Allow Remote Code Execution (2685939) (uncredentialed check)

Binary data ms12-036dos.nbin...

PT-2012-3327 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 9 Description: A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing a deleted object, potentially corrupting memor...

CVE-2012-1874

CVE-2012-1874 concerns Microsoft Internet Explorer 8 and 9. A use-after-free vulnerability in the IE Developer Toolbar leads to remote code execution when accessing a freed console object, due to incorrect handling of object lifetimes in memory. Public details from security analyses describe a he...

PT-2012-3622 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 8 through 9 Description: A remote code execution issue exists due to improper handling of objects in memory by Internet Explorer, allowing attackers to execute arbitrary code by accessing a deleted object...

PT-2012-3616 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 8 Description: A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing a deleted object, potentially corrupting memor...

MS12-020: Vulnerabilities in Remote Desktop Could Allow Remote Code Execution (2671387) (uncredentialed check)

Binary data ms12-020remote.nbin...

Microsoft Windows Remote Desktop Protocol Code Execution (MS12-020; CVE-2012-0002)

A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way that the Remote Desktop Protocol RDP accesses an object in memory that has been improperly initialized or has been deleted. A remote attacker may exploit this issue by...

CVE-2012-0011

CVE-2012-0011 relates to Microsoft Internet Explorer 7–9 via MSHTML: a use-after-free in handling of HTML time (t:MEDIA) elements leads to a freed CDispNode reference, enabling remote code execution. ZDI notes IE9 involvement; MS12-010 (2647516) is the official patch. Exploitation context require...

VulnCheck KEV: CVE-2011-1345

Microsoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, as demonstrated by Stephen Fewer as the first of three chained vulnerabilities...

PT-2010-2064 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 7 Description: A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing an object that was not properly...

PT-2009-4029 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 for Windows XP SP2 and SP3 Microsoft Internet Explorer 8 for Server 2003 SP2 Microsoft Internet Explorer 8 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer 8 for Server 2008 SP2 Description: A remote code...