Lucene search
K

6 matches found

Zero Day Initiative
Zero Day Initiative
added 2011/10/15 12:0 a.m.56 views

Microsoft Internet Explorer SetExpandedClipRect Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.5CVSS2.6AI score0.71802EPSS
Exploits4References1
Circl
Circl
added 2010/07/12 12:0 a.m.12 views

CVE-2009-3672

creationtimestamp| type| source ---|---|--- 2010-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16547 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms09072styleobject.rb 2025-02-06 03:13:39+00:00|...

9.3CVSS5.7AI score0.71802EPSS
Exploits4References2
securityvulns
securityvulns
added 2009/12/10 12:0 a.m.61 views

iDefense Security Advisory 12.08.09: Microsoft Internet Explorer HTML Layout Engine Uninitialized Memory Vulnerability

iDefense Security Advisory 12.08.09 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2009 I. BACKGROUND Internet Explorer is a graphical web browser developed by Microsoft Corp. that has been included with Microsoft Windows since 1995. For more information about Internet Explorer,...

9.3CVSS0.71802EPSS
Exploits4
Prion
Prion
added 2009/12/02 11:30 a.m.14 views

Memory corruption

Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that 1 were not properly initialized or 2 are deleted, which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name, selection of the...

9.3CVSS7.9AI score0.71802EPSS
Exploits4References11Affected Software1
CVE
CVE
added 2009/12/02 11:0 a.m.65 views

CVE-2009-3672

CVE-2009-3672 is a memory-corruption vulnerability in Microsoft Internet Explorer 6/7 related to getElementsByTagName for the STYLE element, with corruption of objects in mshtml.dll when outerHTML is changed. It allows remote code execution and is associated with the MS09-072 bulletin; patches/up...

9.3CVSS7.4AI score0.71802EPSS
Exploits4References11Affected Software1
Check Point Advisories
Check Point Advisories
added 2009/11/26 12:0 a.m.14 views

Internet Explorer STYLE Object Remote Code Execution (CVE-2009-3672)

Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has been deleted. To trigger this issue, an attacker may create a...

9.3CVSS6.9AI score0.71802EPSS
Exploits4
Rows per page
Query Builder