Microsoft Internet Explorer VML样式远程代码执行漏洞(CVE-2012-0172)(MS12-023)

BUGTRAQ ID: 52906 CVE ID: CVE-2012-0172 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer在访问已经删除的对象时在实现上存在可以破坏内存的远程代码执行漏洞，攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x...

Remote code execution

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."...

CVE-2012-0172

CVE-2012-0172 affects Microsoft Internet Explorer 6–8. The issue is a use-after-free in the vgx.dll path while processing certain VML behaviors, enabling remote code execution when a user visits a malicious page. Affected products include IE6/7/8 on multiple Windows versions; the root cause is me...

Opera Browser Multiple Vulnerabilities-02 July-11 (Linux)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnlin02jul11.nasl 5912 2017-04-10 09:01:51Z teissa $ Opera Browser Multiple Vulnerabilities-02 July-11 Linux Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

CVE-2012-0172: Improper Control of Generation of Code

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."...

Internet Explorer VML Style Remote Code Execution (MS12-023; CVE-2012-0172)

A remote code execution vulnerability has been reported in Internet Explorer...

Microsoft Internet Explorer CVE-2012-0172 VML Style Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferenci...

Opera Browser Multiple Vulnerabilities-01 July-11 (Linux)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnlin01jul11.nasl 5988 2017-04-20 09:02:29Z teissa $ Opera Browser Multiple Vulnerabilities-01 July-11 Linux Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

Opera Multiple Information Disclosure Vulnerabilities - Linux

Opera is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Opera Multiple Information Disclosure Vulnerabilities (Linux)

The host is installed with Opera and is prone to multiple information disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultinfodiscvulnlin.nasl 5963 2017-04-18 09:02:14Z teissa $ Opera Multiple Information Disclosure Vulnerabilities Linux Authors: Rachana Shetty Copyright:...

FreeBSD : chromium -- multiple vulnerabilities (057130e6-7f61-11e1-8a43-00262d5ed8ee)

Google Chrome Releases reports : 106577 Medium CVE-2011-3066: Out-of-bounds read in Skia clipping. Credit to miaubiz. 117583 Medium CVE-2011-3067: Cross-origin iframe replacement. Credit to Sergey Glazunov. 117698 High CVE-2011-3068: Use-after-free in run-in handling. Credit to miaubiz. 117728 Hi...

CVE-2011-3075

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands...

CVE-2011-3068

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes...

CVE-2011-3069

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes...

CVE-2011-3068

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes...

CVE-2011-3075

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands...

Design/Logic Flaw

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes...

CVE-2011-3069

Removed by vendor...

CVE-2011-3069

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes...

CVE-2011-3075

CVE-2011-3075 describes a use-after-free in Google Chrome prior to 18.0.1025.151, exploitable remotely via style-application commands to cause a denial of service or possibly other impact. The vulnerability affects the Chrome rendering/style handling and is mitigated by upgrading to version 18.0....