Microsoft Internet Explorer/Edge Information Disclosure Vulnerability (CNVD-2016-06276)

Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in Microsoft Internet Explorer versions 9, 10, 11, and Edge due to the program not properly handling memory objects. A remote attacker is allowed to exploit this vulnerability to obtain system...

Microsoft Excel Arbitrary Code Execution Vulnerability (CNVD-2016-04960)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An arbitrary code execution vulnerability exists in Microsoft Office, which stems from the program's failu...

Microsoft Edge Multiple Vulnerabilities (3134225)

This host is missing a critical security update according to Microsoft Bulletin MS16-011. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of the Doc object implementation in PDF file viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the handling of objects in memory. Exploiting this vulnerability can allow a local attacker to increase their privileges through a specially created application...

Microsoft Edge Memory Object Handling Information Disclosure Vulnerability

Microsoft Edge is one of the latest WEB browsers. A security vulnerability exists in Microsoft Edge's handling of object memory. The vulnerability allows remote attackers to construct a special WEB page to trick users into loading it, which can obtain partial memory information about the target...

Microsoft Office Remote Code Execution (MS15-059: CVE-2015-1760)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to improper handling of objects in memory while parsing a specially crafted Office file. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted Office fil...

Microsoft Windows - ClientCopyImage Win32k (MS15-051) (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows ClientCopyImage Win32k Exploit', 'Description' = %q Thi...

Microsoft Windows ClientCopyImage Improper Object Handling Exploit

This Metasploit module exploits improper object handling in the win32k.sys kernel mode driver. This Metasploit module has been tested on vulnerable builds of Windows 7 x64 and x86, and Windows 2008 R2 SP1 x64. This module requires Metasploit: http://metasploit.com/download Current source:...

Microsoft Windows ClientCopyImage Improper Object Handling

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class Metasploit3 'Windows ClientCopyImage Win32k Exploit', 'Description' = %q Thi...

Microsoft Internet Explorer Memory Corruption (MS15-056: CVE-2015-1752)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Windows ClientCopyImage Win32k Exploit

This module exploits improper object handling in the win32k.sys kernel mode driver. This module has been tested on vulnerable builds of Windows 7 x64 and x86, and Windows 2008 R2 SP1 x64. Module Options msf use exploit/windows/local/ms15/051clientcopyimage msf undefined051clientcopyimage show...

PT-2015-1169

Name of the Vulnerable Software and Affected Versions Microsoft Office 2007 SP3 Microsoft Office versions prior to the fixed version Description The issue exists due to incorrect handling of objects in memory. Exploitation occurs when a user opens a specially crafted file. A remote attacker could...

Type confusion

IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...

CVE-2015-1061

IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...

PT-2015-1002

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.2 Apple OS X versions through 10.10.2 Apple TV versions prior to 7.1 Description The issue allows a remote attacker to execute arbitrary code with elevated privileges using a malicious application that exploits ty...

Microsoft Windows OLE Object Handling Code Execution Vulnerabilities (3011443)

This host is missing a critical security update according to Microsoft Bulletin MS14-064. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-037 Internet Explorer Same ID Property Deleted Object Handling Memory Corruption

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-3881)(MS13-081)

BUGTRAQ ID: 62830 CVECAN ID: CVE-2013-3881 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核模式驱动程序处理内存对象时存在本地权限提升漏洞，成功利用后可在内核模式中运行任意代码。 0 Microsoft Windows XP Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 200...

CVE-2013-1340

CVE-2013-1340 is a Windows kernel local privilege-escalation vulnerability in the Win32k.sys component (Win32k Dereference Vulnerability). The flaw occurs in memory object handling within the Win32k kernel-mode driver and affects multiple Windows platforms including XP SP2/SP3, Server 2003 SP2, V...