Lucene search
K

7 matches found

Zero Day Initiative
Zero Day Initiative
added 2016/07/12 12:0 a.m.38 views

Microsoft Edge InjectHtmlStream Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to corrupt memory on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within InjectHtmlStream. By...

5.1CVSS3AI score0.15905EPSS
Exploits0References1
seebug.org
seebug.org
added 2012/12/13 12:0 a.m.20 views

Microsoft Internet Explorer InjectHTMLStream函数释放后重用远程代码执行漏洞(MS12-077)

BUGTRAQ ID: 56828 CVECAN ID: CVE-2012-4781 Microsoft Internet Explorer是微软公司推出的一款网页浏览器,使用相当广泛。 Microsoft Internet Explorer 6、7、8、9、10在处理恶意HTML内容时,"InjectHTMLStream"函数存在错误的内存操作,通过引诱用户浏览恶意网站,未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft...

9.3CVSS6.4AI score0.49415EPSS
Exploits1
NVD
NVD
added 2012/12/12 12:55 a.m.12 views

CVE-2012-4781

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "InjectHTMLStream Use After Free Vulnerability."...

9.3CVSS7.3AI score0.49415EPSS
Exploits1References3
Prion
Prion
added 2012/12/12 12:55 a.m.15 views

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "InjectHTMLStream Use After Free Vulnerability."...

9.3CVSS7.8AI score0.49415EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2012/12/12 12:0 a.m.59 views

CVE-2012-4781

CVE-2012-4781 is a Use-After-Free vulnerability in Microsoft Internet Explorer (IE6–IE10) triggered by crafted HTML/JS on a malicious site, enabling remote code execution via access to a deleted object in InjectHTMLStream. Public references note multiple use-after-free variants and credit MS12-07...

9.3CVSS7.5AI score0.49415EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2012/12/12 12:0 a.m.17 views

CVE-2012-4781

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "InjectHTMLStream Use After Free Vulnerability."...

7.3AI score0.49415EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2012/12/12 12:0 a.m.18 views

Microsoft Internet Explorer Multiple Vulnerabilities (2761465)

This host is missing a critical security update according to Microsoft Bulletin MS12-077. OpenVAS Vulnerability Test $Id: secpodms12-077.nasl 5912 2017-04-10 09:01:51Z teissa $ Microsoft Internet Explorer Multiple Vulnerabilities 2761465 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPod,...

9.3CVSS0.3AI score0.5145EPSS
Exploits2References4
Rows per page
Query Builder