23361 matches found
Microsoft Windows Media Center Library - Parsing Remote Code Execution aka 'self-executing' MCL File
Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file CVE-2015-6131 Software Vendor: Microsoft Software version : MS Windows Media Center latest version on any Windows OS. Software Vendor Homepage: http://www.microsoft.com CVE: CVE-2015-6131 Exploit Author:...
Microsoft Internet Explorer 11.0.9600.18097 - COmWindowProxy::SwitchMarkup NULL PTR
IE11 11.0.9600.18097 NULL PTR / Exploit Title: IE 11 COmWindowProxy::SwitchMarkup NULL PTR Date: 09.12.2015 Exploit Author: Marcin Ressel Vendor Homepage: www.microsoft.com Software Link: 0 Version: 11.0.9600.18097 Tested on: Windows 7 x64 https://twitter.com/mressel / var trg,src,arg; function t...
Microsoft VBScript and JScript Scripting Engine Memory Corruption Vulnerability
Microsoft Internet Explorer IE is a web browser developed by Microsoft, and is the default browser that comes with the Windows operating system.Microsoft VBScript known as Visual Basic Script is a scripting language, and is also the default programming language for ASP dynamic web pages. JScript ...
Internet Explorer 11.0.9600.18097 COmWindowProxy::SwitchMarkup NULL PTR Exploit
Exploit for windows platform in category dos / poc IE11 11.0.9600.18097 NULL PTR / Exploit Title: IE 11 COmWindowProxy::SwitchMarkup NULL PTR Date: 09.12.2015 Exploit Author: Marcin Ressel Vendor Homepage: www.microsoft.com Software Link: 0 Version: 11.0.9600.18097 Tested on: Windows 7 x64...
Microsoft Internet Explorer XSS Filter Bypass Vulnerability (CNVD-2015-08027)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security feature bypass vulnerability exists in Microsoft IE that originates from the program failing to properly enforce...
Microsoft Internet Explorer 11.0.9600.18097 - COmWindowProxy::SwitchMarkup NULL PTR
Microsoft Internet Explorer 11.0.9600.18097 - COmWindowProxy::SwitchMarkup NULL PTR IE11 11.0.9600.18097 NULL PTR / Exploit Title: IE 11 COmWindowProxy::SwitchMarkup NULL PTR Date: 09.12.2015 Exploit Author: Marcin Ressel Vendor Homepage: www.microsoft.com Software Link: 0 Version: 11.0.9600.1809...
Microsoft Internet Explorer Multiple Vulnerabilities (3116180)
This host is missing a critical security update according to Microsoft Bulletin MS15-124. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Security Update for Internet Explorer Flash Player for Windows 8 for X64-based Systems (KB3119147)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
December 2015 Microsoft Patch Tuesday Security Bulletins
Forgive your local Windows admin if they’re a little shy on holiday cheer in the coming days. Blame instead Microsoft for foisting upon them on Tuesday 71 security patches, including two for vulnerabilities in Office and the Windows kernel currently under attack. Microsoft also issued a separate...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6160)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6159)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
MS15-126: Cumulative security update for JScript and VBScript to address remote code execution: December 8, 2015
Fixes vulnerabilities in the VBScript scripting engine in Windows that could allow remote code execution if an attacker hosts a specially crafted website.SummaryThis security update fixes vulnerabilities in the VBScript scripting engine in Windows. The more severe of the vulnerabilities could all...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6147)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer CVE-2015-6083 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. They can then execute arbitrary code in the context of the currently logged-in user. Failed attacks...
Microsoft Scripting Engine Memory Corruption (MS15-124: CVE-2015-6136)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6154)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an out of bounds memory access. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affected version of Internet Explorer...
Microsoft Internet Explorer and Edge CVE-2015-6151 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently...
MS15-134 Microsoft Windows Media Center MCL Information Disclosure
This module exploits a vulnerability found in Windows Media Center. It allows an MCL file to render itself as an HTML document in the local machine zone by Internet Explorer, which can be used to leak files on the target machine. Please be aware that if this exploit is used against a patched...
Microsoft Internet Explorer Memory Corruption (MS15-124: CVE-2015-6143)
A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to an error in manipulating CAttrArray objects. Successful exploitation could cause memory corruption in a way that would allow attackers to execute code on the target...
PT-2015-3014
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 7 through 11 Microsoft Edge Description A security feature bypass exists when Microsoft Edge and Internet Explorer fail to use the Address Space Layout Randomization ASLR security feature, allowing an...