MS15-1 0 6 JavaScript ArrayBuffer. slice any address read-vulnerability analysis-vulnerability warning-the black bar safety net

2 0 1 5 year 8 month 1 3 day, Microsoft released the Update Patch security bulletin MS15-1 0 6, which contains the About Internet Explorer multiple vulnerabilities. Before, we have explained how to attack the VBScript engine inside the Filter function in the presence of type confusion...

CVE-2015-6053

CVE-2015-6053 affects Microsoft Internet Explorer (versions 7–11); the vulnerability enables remote info disclosure by passing crafted parameters to ArrayBuffer.slice, allowing memory content exposure from the process. The root cause is unsafe handling of parameters in ArrayBuffer.slice within IE...