PT-2010-5140

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 8 Description The issue allows remote attackers to obtain sensitive information about the heap memory addresses used by an application. This is due to the CTimeoutEventList::InsertIntoTimeoutList function in Microso...

CVE-2010-3886: Exposure of Sensitive Information to an Unauthorized Actor

The CTimeoutEventList::InsertIntoTimeoutList function in Microsoft mshtml.dll uses a certain pointer value as part of producing Timer ID values for the setTimeout and setInterval methods in VBScript and JScript, which allows remote attackers to obtain sensitive information about the heap memory...

Microsoft - MSHTML.dll CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak

Microsoft - MSHTML.dll CTIMEOUTEVENTLIST::INSERTINTOTIMEOUTLIST Memory Leak mshtml.dll CTimeoutEventList::InsertIntoTimeoutList Timer ID Pointer leak - Rubén Santamarta www.reversemode.com var i = 1; // counter function LeakOrDie var t; t=setInterval"foo",2000; t-=i;...