BFS-SA-2015-001: Internet Explorer CTreeNode::GetCascadedLang Use-After-Free Vulnerability

Blue Frost Security GmbH https://www.bluefrostsecurity.de/ researchatbluefrostsecurity.de BFS-SA-2015-001 12-August-2015 Vendor: Microsoft, http://www.microsoft.com Affected Products: Internet Explorer Affected Version: IE 8-11 Vulnerability: CTreeNode::GetCascadedLang Use-After-Free Vulnerabilit...

Microsoft Internet Explorer 11 CTreeNode::GetCascadedLang Use-After-Free Exploit

Microsoft Internet Explorer 11 is prone to a use-after-free vulnerability in the MSHTML!CTreeNode::GetCascadedLang function. The following analysis was performed on Internet Explorer 11 on Windows 8.1 x64. If an attacker succeeds in bypassing the Memory Protector and Isolated Heap protection...

Microsoft Internet Explorer - CTreeNode::GetCascadedLang Use-After-Free (MS15-079)

function Trigger fori=0; i document.getElementsByTagName"m...