5 matches found
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08007)
Internet Explorer is a web browser from Microsoft. Internet Explorer 8 has a security vulnerability in the use of CStylesheet objects. By tampering with document elements, an attacker could cause out-of-bounds memory access and then execute arbitrary code in the current process context...
Microsoft IE CStyleSheet对象释放后使用漏洞(MS10-035)
BUGTRAQ ID: 40417 CVE ID: CVE-2010-1262 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer对CStyleSheet对象支持的实现方式中存在释放后使用漏洞。在创建样式表数组时,其中会包含有对其根容器的引用。如果所创建的样式表不属于标记中元素,则在销毁元素时也会释放根容器。之后应用再试图使用样式表时就会使用无效的指针,导致以当前用户权限执行任意代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0...
Microsoft Internet Explorer Stylesheet Array Removal Remote Code Execution Vulnerability
No description provided by source. -- CVE ID: CVE-2010-1262 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 8 -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection filter ...
Memory corruption
Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruptio...
Microsoft Internet Explorer Stylesheet Array Removal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required in that a target must visit a malicious page. The specific flaw exists within IE's support for the CStyleSheet object. When a style sheet...