Microsoft Internet Explorer 8 8 MSHTML SRunPointer::SpanQualifier/RunType Out-Of-Bounds Read

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the sixteenth entry in that series. Unfortunately I won't be able to publish everything within one month at the current rate, so I may continue to publish these throug...

CVE-2015-0050

CVE-2015-0050 concerns Microsoft Internet Explorer 8 and 9. The connected sources confirm a remote memory-corruption vulnerability in IE that attackers can exploit via a crafted web page to achieve arbitrary code execution or a denial of service. The issue is explicitly described as a memory-corr...