23361 matches found
Microsoft Internet Explorer CVE-2014-6337 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6343; CVE-2015-1662)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
Microsoft Internet Explorer CVE-2014-6344 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Microsoft Internet Explorer Memory Corruption (MS14-065: CVE-2014-6342)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...
MS14-064: Vulnerabilities in Windows OLE Could Allow Remote Code Execution (3011443)
The remote Windows host is affected by multiple vulnerabilities : - A remote code execution vulnerability due to Internet Explorer improperly handling access to objects in memory. A remote attacker can exploit this vulnerability by convincing a user to visit a specially crafted website in Interne...
Adobe Flash Player UncompressViaZlibVariant Uninitialized Memory
This module exploits an uninitialized memory vulnerability in Adobe Flash Player. The vulnerability occurs in the ByteArray::UncompressViaZlibVariant method, which fails to initialize allocated memory. When using a correct memory layout this vulnerability leads to a ByteArray object corruption,...
EMET 5.1 is available
Today, we’re releasing the Enhanced Mitigation Experience Toolkit EMET 5.1 which will continue to improve your security posture by providing increased application compatibility and hardened mitigations. You can download EMET 5.1 from microsoft.com/emet or directly from here. Following is the list...
Microsoft Internet Explorer 11 - Denial of Service
Microsoft Internet Explorer 11 - Denial of Service Exploit Title: IE D.O.S Date: 10/28/2014 Exploit Author: Behrooz Abbassi Vendor Homepage: http://microsoft.com Software Link: http://windows.microsoft.com/en-us/internet-explorer/download-ie Version: tested on 8 to 11 Tested on: XP to 8.1 x64/x86...
Microsoft Internet Explorer 11 - Denial of Service
Exploit Title: IE D.O.S Date: 10/28/2014 Exploit Author: Behrooz Abbassi Vendor Homepage: http://microsoft.com Software Link: http://windows.microsoft.com/en-us/internet-explorer/download-ie Version: tested on 8 to 11 Tested on: XP to 8.1 x64/x86 FuckIE="""\n\nIE D.O.S\n\n\n %s \n\n""" rubbish =...
Internet Explorer 8 MS14-035 Use-After-Free Exploit
Exploit for windows platform in category remote exploits https://www.linkedin.com/in/aymansagy Tested on: IE8 with Java6 on Windows7 -- MS14-035 IE8 Use-after-free Exploit You need to install Java to view this page. -- x spraysize = 5000; sprayelement = document.getElementById"sprayfrm";...
November 2014 Microsoft Patch Tuesday Security Bulletins
Microsoft today provided its Patch Tuesday advanced notification, giving IT managers a head’s up about 16 bulletins that are scheduled to be delivered next week, including five rated critical for remote code execution and privilege escalation issues. The heavy patch load is an anomaly for 2014,...
Advance Notification Service for the November 2014 Security Bulletin Release
Today, we provide advance notification for the release of 16 Security Bulletins. Five of these updates are rated Critical, nine are rated as Important, and two are rated Moderate in severity. These updates are for Microsoft Windows, Internet Explorer, Office, Exchange, .NET Framework, Internet...
Microsoft Internet Explorer Resource Information Disclosure (MS14-052; CVE-2013-7331)
An information disclosure vulnerability exists in Internet Explorer. This vulnerability is caused when the XMLDOM ActiveX control allows local resources to be enumerated. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of...
Microsoft Plans to Disable SSLv3 in IE, All Online Services
Microsoft is planning to disable support for the weak SSLv3 protocol in Internet Explorer at some undetermined point in the future, and also will remove support for it in the company’s online services soon. The security and utility of SSLv3 has been an issue for a long time, but it came into...
Security Advisory 3009008 updated
Today, we announced the availability of SSL 3.0 fallback warnings in Internet Explorer IE 11. For more information please visit the IE blog. We have also published an update on the status of the changes we have made to our Azure offerings in response to the SSL 3.0 vulnerability. For more...
VulnCheck KEV: CVE-2013-3163
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website...
Mozilla.org Cross Site Scripting
Domains: http://lxr.mozilla.org/ http://mxr.mozilla.org/ The two domains above are almost the same Websites information: lxr.mozilla.org, mxr.mozilla.org are cross references designed to display the Mozilla source code. The sources displayed are those that are currently checked in to the mainline...
two browser mem disclosure bugs (CVE-2014-1580 and CVE-something-or-other)
First of all, CVE-2014-1580 MSFA 2014-78 is a bug that caused Firefox prior to version 33 released today to leak bits of uninitialized memory when rendering certain types of truncated images onto canvas. Mozilla's advisory is here: https://www.mozilla.org/security/announce/2014/mfsa2014-78.html B...
Mozilla Firefox and Microsoft Internet Explorer information leakage
Memory content leakage is possible on crafted image parsing...
CVE-2014-6466
Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...