Microsoft Windows multiple security vulnerabilities

Multiple vulnerabilities in Edge and Internet Explorer, code execution in graphics and journaling, mediascenter, .Net framework, task management, Active Directory, Hyper-V...

Microsoft Internet Explorer 11 - Stack Underflow Crash PoC

Exploit for windows platform in category dos / poc crash IE 11 function crash var id0 = null; id0 = document.createElement 'THEAD' ; document.body.appendChild id0 ; elemTree = ; elemTree0= document.createElement'SELECT'; document.all7.appendChildelemTree0; elemTree1= document.createElement'B';...

Enabling QR codes in Internet Explorer, or a story of a cross-platform memory disclosure

Posted by Mateusz Jurczyk of Google Project Zero In the previous series of posts parts 1 2 3 4, we discussed the exploitation process of a serious “blend” vulnerability CVE-2015-0093 / CVE-2015-3052, which was special in that it provided the attacker with an extremely powerful primitive arbitrary...

1 0 5 security bulletins: Microsoft 2 0 1 5 published in the vulnerability count far more than last year-vulnerability warning-the black bar safety net

9 on 8 April, Microsoft released the 1 2 new security bulletins, five of which for emergency announcements. Plus This is 1 of 2 new security bulletins so far this year there are already 1 0 5. Microsoft 2 0 1 4 just released a 8 5 a security Bulletin. So why this year there were so many security...

Microsoft Internet Explorer 11 - Stack Underflow Crash (PoC)

crash IE 11 function crash var id0 = null; id0 = document.createElement 'THEAD' ; document.body.appendChild id0 ; elemTree = ; elemTree0= document.createElement'SELECT'; document.all7.appendChildelemTree0; elemTree1= document.createElement'B'; document.all8.appendChildelemTree1; elemTree2=...

Microsoft Internet Explorer 11 - Stack Underflow Crash (PoC)

Microsoft Internet Explorer 11 - Stack Underflow Crash PoC crash IE 11 function crash var id0 = null; id0 = document.createElement 'THEAD' ; document.body.appendChild id0 ; elemTree = ; elemTree0= document.createElement'SELECT'; document.all7.appendChildelemTree0; elemTree1=...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05964)

Internet Explorer is a web browser from Microsoft. A security vulnerability exists in Microsoft Internet Explorer 10, 11, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed website...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in the VBScript and JScript engines in Microsoft IE version 8. An attacker exploiting...

Microsoft Internet Explorer Elevation of Privilege Vulnerability (CNVD-2015-05957)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. An elevation of privilege vulnerability exists in Microsoft IE version 11 when it fails to properly validate privileges under certai...

Microsoft Internet Explorer Tampering Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A tampering vulnerability exists in Microsoft IE versions 10 and 11 when accessing improperly labeled files. An attacker could explo...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-05955)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. An information disclosure vulnerability exists in Microsoft IE version 10 and 11 when it fails to properly disclose memory contents...

CVE-2015-2541

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2491...

CVE-2015-2501

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability."...

CVE-2015-2500

Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability."...

CVE-2015-2499

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2492,...

CVE-2015-2498

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2492,...

CVE-2015-2493

The 1 VBScript and 2 JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."...

CVE-2015-2492

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2494,...

CVE-2015-2491

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2485 and CVE-2015-2541...

CVE-2015-2490

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2492, CVE-2015-2494,...