Microsoft Internet Explorer and Edge CVE-2016-7282 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in...

Microsoft Internet Explorer and Edge CVE-2016-7279 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

Microsoft Internet Explorer Memory Corruption (MS16-144: CVE-2016-7279)

A remote code execution vulnerability exists in Internet Explorer and Microsoft Edge. The vulnerability is due to the way scripting engine renders when handling objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

Microsoft Internet Explorer and Edge CVE-2016-7281 Security Bypass Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. Internet Explorer 10, 11, and Edge are vulnerable...

Microsoft Internet Explorer and Edge CVE-2016-7287 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer and Edge are prone to a remote memory corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

December 13, 2016 — KB3206632 (OS Build 14393.576)

None None...

Microsoft Internet Explorer 9 - IEFRAME CSelection­Interact­Button­Behavior::_Update­Button­Location Use-After-Free (MS13-047)

Microsoft Internet Explorer 9 - IEFRAME CSelection­Interact­Button­Behavior::Update­Button­Location Use-After-Free MS13-047 function go document.exec­Command'Select­All'; document.exec­Command'superscript'; set­Timeoutfunction o­Sup­Element=document.get­Elements­By­Tag­Name'sup'0;...

Microsoft Internet Explorer 9 IEFRAME CSelectionInteractButtonBehavior::_UpdateButtonLocation Use-After-Free

Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the thirtieth entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161212001.html. There you can find a repro that triggered th...

Microsoft Internet Explorer 9 - IEFRAME CSelection­Interact­Button­Behavior::_Update­Button­Location Use-After-Free (MS13-047)

function go document.exec­Command'Select­All'; document.exec­Command'superscript'; set­Timeoutfunction o­Sup­Element=document.get­Elements­By­Tag­Name'sup'0; o­Sup­Element.swap­Nodedocument.document­Element; , 0; !-- Time-line 27 September 2012: This vulnerability was found through fuzzing. 3...

Microsoft Internet Explorer 9 MSHTML - CDisp­Node::Insert­Sibling­Node Use-After-Free (MS13-037) (2)

Exploit for windows platform in category dos / poc !-- Source: http://blog.skylined.nl/20161208001.html Synopsis A specially crafted web-page can trigger a memory corruption vulnerability in Microsoft Internet Explorer 9. I did not investigate this vulnerability thoroughly, so I cannot speculate ...

Microsoft Internet Explorer 9 MSHTML - CElement::Has­Flag Memory Corruption Exploit

Exploit for windows platform in category dos / poc // First tag can be any inline but must NOT be closed yet // Second tag can be anything that's not inline. // "text1" can be anything document.write'text1'; // The tree is in good shape. show"DOM Tree after first write",...

Microsoft Internet Explorer 9 MSHTML - CDisp­Node::Insert­Sibling­Node Use-After-Free (MS13-037) (1)

Exploit for windows platform in category dos / poc window.onload=functionlocation.reload;; text .float float:left; .zoom zoom:3000%; .border::first-let...

Informatica: [kb.informatica.com] DOM based XSS in the bindBreadCrumb function

The bindBreadCrumb function, which is called after the document is loaded: javascript $document.readyfunction bindBreadCrumb; ; has the following insecure link assignments, that use non-encoded URL values: javascript strChild = "Search Results"; strChild = "Search Results"; strChild = "Search...

Microsoft Internet Explorer MSHTML CDispNode::InsertSiblingNode Use-After-Free

Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the twenty-seventh entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161207001.html. There you can find a repro that trigger...

Cumulative Update for Windows 10 Version 1607 and Windows Server 2016: December 9, 2016

None None...

December 9, 2016 — KB3201845 (OS Build 14393.479)

None None...

Microsoft Internet Explorer 9 - MSHTML CDisp­Node::Insert­Sibling­Node Use-After-Free (MS13-037) (1)

window.onload=functionlocation.reload;; text .float float:left; .zoom zoom:3000%; .border::first-letter border-top:1px; !-- Time-line 1 November 2012: This vulnerability wa...

Microsoft Internet Explorer 9 - MSHTML CElement::Has­Flag Memory Corruption

Microsoft Internet Explorer 9 - MSHTML CElement::Has­Flag Memory Corruption // First tag can be any inline but must NOT be closed yet // Second tag can be anything that's not inline. // "text1" can be anything document.write'text1'; // The tree is in good shape. show"DOM Tree after first write",...

Microsoft Internet Explorer 9 - MSHTML CDisp­Node::Insert­Sibling­Node Use-After-Free (MS13-037) (2)

Microsoft Internet Explorer 9 - MSHTML CDisp­Node::Insert­Sibling­Node Use-After-Free MS13-037 2 !-- Source: http://blog.skylined.nl/20161208001.html Synopsis A specially crafted web-page can trigger a memory corruption vulnerability in Microsoft Internet Explorer 9. I did not investigate this...

Microsoft Internet Explorer 9 - MSHTML CDisp­Node::Insert­Sibling­Node Use-After-Free (MS13-037) (1)

Microsoft Internet Explorer 9 - MSHTML CDisp­Node::Insert­Sibling­Node Use-After-Free MS13-037 1 window.onload=functionlocation.reload;; text .float float:left; .zoom zoom:3000%; .border::first-letter...