Microsoft Internet Explorer 9 IEFRAME CMarkup..RemovePointerPos Use-After-Free

Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the 32nd entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161214001.html. There you can find a repro that triggered this...

CVE-2013-3846

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted CSpliceTreeEngine::InsertSplice object in an HTML document, aka "Internet Explorer Memory Corruption Vulnerability," ...

CVE-2013-3143

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187 2016-12-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40923...

CVE-2013-3143

CVE-2013-3143 : Use-after-free/memory corruption in Microsoft Internet Explorer 9 and 10 (IEFRAME CMarkup..RemovePointerPos) triggered by a crafted web page. Affects IE9/IE10 via crafted site; exploitable via remote attacker. Public exploit exists (Exploit-DB entry 40923). Patch referenced in MS1...

Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3143)

BUGTRAQ ID: 60962 CVECAN ID: CVE-2013-3143 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...

Microsoft Internet Explorer Multiple Vulnerabilities (2846071)

This host is missing a critical security update according to Microsoft Bulletin MS13-055. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Internet Explorer Deleted Object Memory Corruption (MS13-055; CVE-2013-3143)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...