7 matches found
CVE-2013-1312
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."...
PT-2013-3055
Name of the Vulnerable Software and Affected Versions Microsoft Remote Desktop Connection Client versions 6.1 through 7.0 Description The issue arises from the Remote Desktop ActiveX control in mstscax.dll, which fails to properly handle objects in memory. This allows remote attackers to execute...
PT-2013-2065
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 9 Description The issue allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object. This occurs due to the way Internet Explorer accesses an...
CVE-2012-1524: Improper Control of Generation of Code
Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Attribute Remove Remote Code Execution Vulnerability."...
CVE-2012-1878: Improper Control of Generation of Code
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnBeforeDeactivate Event Remote Code Execution Vulnerability."...
CVE-2011-1993: Undefined Security Weakness
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Scroll Event Remote Code Execution Vulnerability."...
Mozilla Crash and remote code execution in normalizeDocument (MFSA 2010-57)
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code...