PT-2014-1052

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 8 through 11 Description The issue is related to a use-after-free error when handling a CTreeNode object, allowing an attacker to execute arbitrary code or cause a denial of service via a crafted web site...

Microsoft Internet Explorer CTreeNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Microsoft Internet Explorer CTreeNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within a...

Microsoft Internet Explorer CTreeNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer CTreeNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2013-1288

Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CTreeNode Use After Free Vulnerability."...

CVE-2013-1288

CVE-2013-1288 is a use-after-free vulnerability in Microsoft Internet Explorer 8 (CTreeNode) that enables remote code execution via a crafted webpage. The NVD entry lists a high impact (CVSS v2 base 9.3) with network access, no user interaction, and complete confidentiality/integrity/availability...

CVE-2013-1288: Undefined Security Weakness

Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CTreeNode Use After Free Vulnerability."...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2809289)

This host is missing a critical security update according to Microsoft Bulletin MS13-021. OpenVAS Vulnerability Test $Id: secpodms13-021.nasl 6115 2017-05-12 09:03:25Z teissa $ Microsoft Internet Explorer Multiple Use After Free Vulnerabilities 2809289 Authors: Thanga Prakash S Copyright: Copyrig...

Microsoft Internet Explorer 9 CTreeNode Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2012-4775

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreeNode Use After Free Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreeNode Use After Free Vulnerability."...

CVE-2012-4775: Undefined Security Weakness

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreeNode Use After Free Vulnerability."...

CVE-2012-4775

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreeNode Use After Free Vulnerability."...

CVE-2012-4775

Microsoft Internet Explorer 9 is affected by CVE-2012-4775 (CTreeNode Use After Free Vulnerability). The issue is a use-after-free in IE’s memory handling when accessing objects that were not properly initialized or already deleted (CTreeNode/CTreePos/CTreeNode-related code paths), leading to pot...

Microsoft Internet Explorer Multiple Use-After-Free Vulnerabilities (2761451)

This host is missing a critical security update according to Microsoft Bulletin MS12-071. OpenVAS Vulnerability Test $Id: secpodms12-071.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Internet Explorer Multiple Use-After-Free Vulnerabilities 2761451 Authors: Antu Sanadi Copyright: Copyright c...

Code to mitigate IE event zero-day (CVE-2010-0249)

Here's a mitigation for the CVE-2010-0249 IE createEventObject srcElement zero-day. Quite simply, it just disables the createEventObject method by mangling its name in memory. If anyone knows an important web application that uses createEventObject, please respond to the mailing list. Use this co...