Microsoft Internet Explorer Type Confusion

Hello everyone, I've recently released examples on twitter of how to trigger two security vulnerabilities in Microsoft Internet Explorer. These issue were discovered last year and reported to Microsoft through ZDI. Microsoft release security updates to address these issues last Tuesday. ======...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2016-01015)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer 9 through 11, which could allow a remote attacker to execute arbitrary code or cause a denial of...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2016-01020)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer version 11 and Microsoft Edge, which could allow a remote attacker to execute arbitrary code or cause...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2016-01017)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer 9 through 11, which could allow a remote attacker to execute arbitrary code or cause a denial of...

Microsoft Internet Explorer Denial of Service Vulnerability (CNVD-2016-01016)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A denial of service vulnerability exists in Microsoft Internet Explorer 9 that could allow a remote attacker to execute arbitrary code or cause a denial of service via a...

CVE-2016-0064

Microsoft Internet Explorer 10 is affected by CVE-2016-0064 (Memory corruption vulnerability). A crafted web page can trigger memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service. The issue is addressed by MS16-009 (Cumulative Security Update for Int...

CVE-2016-0071

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-0067

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060, CVE-2016-0061, CVE-2016-0063, an...

CVE-2016-0059

CVE-2016-0059 affects Microsoft Internet Explorer (Hyperlink Object Library) and enables information disclosure from process memory when a user clicks a crafted URL in an email or Office document. Affected products include IE 9–11; root cause is improper handling of memory objects in the Hyperlin...

CVE-2016-0071

CVE-2016-0071 is a memory corruption vulnerability in Microsoft Internet Explorer 9. A crafted web site can trigger memory corruption, enabling remote code execution or a denial of service. The issue is addressed by the MS16-009 update (Cumulative Security Update for Internet Explorer), which cov...

Microsoft Internet Explorer DOMImplementation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Microsoft Internet Explorer Multiple Vulnerabilities (3134220)

This host is missing a critical security update according to Microsoft Bulletin MS16-009. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer CVE-2016-0060 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0062)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0064)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer CVE-2016-0071 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CAttrArray Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer CVE-2016-0072 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer Memory Corruption (MS16-009: CVE-2016-0071)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer CVE-2016-0064 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...