Lucene search
K

5 matches found

CNVD
CNVD
added 2015/12/09 12:0 a.m.2 views

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-08007)

Internet Explorer is a web browser from Microsoft. Internet Explorer 8 has a security vulnerability in the use of CStylesheet objects. By tampering with document elements, an attacker could cause out-of-bounds memory access and then execute arbitrary code in the current process context...

9.3CVSS7.7AI score0.16463EPSS
Exploits1References1
seebug.org
seebug.org
added 2010/06/10 12:0 a.m.54 views

Microsoft IE CStyleSheet对象释放后使用漏洞(MS10-035)

BUGTRAQ ID: 40417 CVE ID: CVE-2010-1262 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 Internet Explorer对CStyleSheet对象支持的实现方式中存在释放后使用漏洞。在创建样式表数组时,其中会包含有对其根容器的引用。如果所创建的样式表不属于标记中元素,则在销毁元素时也会释放根容器。之后应用再试图使用样式表时就会使用无效的指针,导致以当前用户权限执行任意代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0...

9.3CVSS6.4AI score0.63354EPSS
Exploits2
seebug.org
seebug.org
added 2010/06/09 12:0 a.m.31 views

Microsoft Internet Explorer Stylesheet Array Removal Remote Code Execution Vulnerability

No description provided by source. -- CVE ID: CVE-2010-1262 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 8 -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability by Digital Vaccine protection filter ...

9.3CVSS6.5AI score0.63354EPSS
Exploits2
Prion
Prion
added 2010/06/08 10:30 p.m.19 views

Memory corruption

Microsoft Internet Explorer 6 SP1 and SP2, 7, and 8 allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, related to the CStyleSheet object and a free of the root container, aka "Memory Corruptio...

9.3CVSS8.1AI score0.63354EPSS
Exploits2References7Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2010/06/08 12:0 a.m.53 views

Microsoft Internet Explorer Stylesheet Array Removal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required in that a target must visit a malicious page. The specific flaw exists within IE's support for the CStyleSheet object. When a style sheet...

10CVSS5.4AI score0.63354EPSS
Exploits2References1
Rows per page
Query Builder