23361 matches found
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05909)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists when Microsoft IE versions 7 through 11 fail to properly access objects in memory. The vulnerability...
CVE-2015-2492
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2494,...
CVE-2015-2489
CVE-2015-2489 affects Internet Explorer 11. The vulnerability enables elevation of privilege when a user visits a crafted website, by transitioning from Low Integrity to Medium Integrity due to improper privilege validation. The practical impact is privilege escalation on vulnerable IE11 installa...
CVE-2015-2542
Mode C: CVE-2015-2542 affects Microsoft Edge and Internet Explorer 10/11. The vulnerability is described as memory corruption triggered by a crafted web site, enabling remote code execution or a denial of service. Connected records identify affected products as Microsoft Edge/IE, with root cause ...
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05913)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists when Microsoft IE versions 9 through 11 fail to properly access objects in memory. The vulnerability...
CVE-2015-2491
Microsoft Internet Explorer 9–11 (and Microsoft Edge) are associated with memory corruption vulnerabilities described as CVE-2015-2491, a member of the same vulnerability family as CVE-2015-2485 and CVE-2015-2541. Exploitation details are not provided in the documents, but the OpenVAS entry refer...
CVE-2015-2493
CVE-2015-2493 affects Microsoft Internet Explorer (IE) engines VBScript and JScript in IE 8 (and IE 7–11 per related advisories). The vulnerability is a memory corruption flaw that can be exploited by a crafted web page to cause remote code execution or, per some sources, memory corruption leadin...
CVE-2015-2500
Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability."...
CVE-2015-2484
Microsoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses, which allows remote attackers to delete arbitrary files via unspecified vectors, aka "Tampering Vulnerability."...
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05907)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists when Microsoft IE versions 7 through 11 fail to properly access objects in memory. The vulnerability...
CVE-2015-2494
Affected software: Microsoft Internet Explorer 7–11 and Microsoft Edge. Vulnerability: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause / details: memory corruption vulnerability in the browser rendering/handling of web content (as describ...
CVE-2015-2492
CVE-2015-2492 affects Microsoft Internet Explorer 7–11. A crafted web site can cause memory corruption, allowing remote code execution or a denial of service. This is addressed by Microsoft Security Bulletin MS15-094; apply the patch to mitigate. Note: details confirm the vulnerability class as m...
CVE-2015-2483
Microsoft Internet Explorer 10 and 11 contain an information-disclosure vulnerability (CVE-2015-2483) that allows remote attackers to obtain sensitive memory contents via a crafted web page. The issue is addressed by the MS15-094 cumulative security update for IE, which covers IE 7–11. According ...
CVE-2015-2490
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2492, CVE-2015-2494,...
Microsoft Releases 12 Security Updates (5 Critical and 7 Important Patches)
With the release of 12 Security Bulletins, Microsoft addresses a total of 56 vulnerabilities in its different products. The bulletins include five critical updates, out of which two address vulnerabilities in all versions of Windows. The September Patch Tuesday update released on second Tuesday o...
September 2015 Microsoft Patch Tuesday Security Bulletins
Microsoft today patched a vulnerability in its graphics component present in Windows, Office and Lync that has been publicly attacked, and is one of five vulnerabilities patched this month that have been publicly disclosed. Microsoft released a dozen bulletins today, five of them it rates critica...
Microsoft Internet Explorer CVE-2015-2489 Remote Privilege Escalation Vulnerability
Description Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Internet Explorer 11 is vulnerable. Technologies Affected Avaya Meeting Exchange - Clien...
Microsoft Internet Explorer CVE-2015-2483 Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in further...
Microsoft Internet Explorer Memory Corruption (MS15-094: CVE-2015-2500)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack by using a specially crafted web page...