155 matches found
Microsoft Internet Explorer Multiple Vulnerabilities (2675157)
This host is missing a critical security update according to Microsoft Bulletin MS12-023. OpenVAS Vulnerability Test $Id: secpodms12-023.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2675157 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPo...
Microsoft Internet Explorer Multiple Vulnerabilities (2675157)
This host is missing a critical security update according to Microsoft Bulletin MS12-023. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Remote code execution
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."...
CVE-2012-0172
CVE-2012-0172 affects Microsoft Internet Explorer 6–8. The issue is a use-after-free in the vgx.dll path while processing certain VML behaviors, enabling remote code execution when a user visits a malicious page. Affected products include IE6/7/8 on multiple Windows versions; the root cause is me...
Internet Explorer VML Style Remote Code Execution (MS12-023; CVE-2012-0172)
A remote code execution vulnerability has been reported in Internet Explorer...
CVE-2012-0172: Improper Control of Generation of Code
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."...
Microsoft Internet Explorer CVE-2012-0172 VML Style Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferenci...
ZDI-12-036 : Microsoft Internet Explorer VML CDispScroller Remote Code Execution Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-036 : Microsoft Internet Explorer VML CDispScroller Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-036 February 22, 2012 - -- CVE ID: CVE-2012-0155 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected...
Microsoft Internet Explorer VML CDispScroller Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the handling ...
Microsoft Internet Explorer 9 VML处理远程代码执行漏洞(MS12-010)
BUGTRAQ ID: 51935 CVE ID: CVE-2012-0155 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer在VML的处理上存在远程代码执行漏洞,攻击者可利用此漏洞执行任意代码,控制应用和计算机。 0 Microsoft Internet Explorer 9 厂商补丁: Microsoft --------- Microsoft已经为此发布了一个安全公告(MS12-010)以及相应补丁: MS12-010:Cumulative Security Update for...
Remote code execution
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."...
CVE-2012-0155
CVE-2012-0155 affects Microsoft Internet Explorer 9 via a VML handling bug that can allow remote code execution when a deleted object is accessed. The vulnerability is rated CVSS v2 base 9.3 (HIGH) with network exploitability and no user interaction. Affected product: Internet Explorer 9; vulnera...
Internet Explorer VML Remote Code Execution (MS12-010; CVE-2012-0155)
A remote code execution vulnerability has been reported in Internet Explorer...
CVE-2012-0155: Improper Control of Generation of Code
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."...
Microsoft Internet Explorer CVE-2012-0155 VML Handling Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...
CVE-2011-1266
The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...
Memory corruption
The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...
CVE-2011-1266
CVE-2011-1266 affects Microsoft Internet Explorer 6–8 via a vulnerability in vgx.dll handling of VML imagedata during DOM parsing, causing memory access to freed/uninitialized objects and enabling remote code execution. The issue is described as a VML memory corruption vulnerability, with the aff...
CVE-2011-1266
The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...
CVE-2011-1266: Use of Uninitialized Resource
The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...