9 matches found
CVE-2020-1349
CVE-2020-1349 해당 취약점은 한글 Windows 10 1909 x64, 코드페이지 949에 설치된 Outlook 2019 16.0.12624.20424에서 발생합니다. TLDR; 이 취약점을 이용해 ASLR을 우회하지는 못했지만, 부팅 시 고정되는 시스템 라이브러리의 주소를 사용하여 계산기를 띄우는 Outlook 2019 32비트 익스플로잇을 작성했습니다. 또한 이 취약점은 제로 클릭 취약점입니다. "outlook.com" 계정 이외의 메일 서비스 계정이 IMAP을 사용하여 Outlook 2019와 연결되어 있으면 ...
Description of the security update for Excel 2016: February 11, 2020
None None...
[Full-disclosure] Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...
Microsoft Internet Explorer Double Byte Character Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. This is related to an error in how double-byte character set DBCS characters are handled in Internationalized Domain Names IDN included in URLS from rendered HTML content. An attacker could exploit this issue v...
CVE-2004-0844
CVE-2004-0844 describes an address bar spoofing vulnerability in Internet Explorer 6 on Double Byte Character Set (DBCS) locales. A canonicalization error in how IE parses certain characters in an HTTP URL could cause the address bar to display a different URL from the actual loaded page, enablin...
CVE-2004-0844: Undefined Security Weakness
Internet Explorer 6 on Double Byte Character Set DBCS systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."...