Design/Logic Flaw

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."...

Information disclosure

Microsoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which allows remote attackers to perform cross-domain reading of JSON files via a crafted web site, aka "JSON Array Information Disclosure Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."...

CVE-2013-1310

CVE-2013-1310 describes a use-after-free vulnerability in Internet Explorer 6 and 7 where remote code execution could be triggered by visiting a crafted webpage that accesses a deleted object. The root cause is a memory-management flaw that can lead to arbitrary code execution in the context of t...

CVE-2013-1312

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."...

CVE-2013-1306

CVE-2013-1306 is a Use-After-Free vulnerability in Microsoft Internet Explorer 9 that could allow remote code execution when visiting a crafted site (distinct from CVE-2013-1313). The connected records indicate this issue has been exploited (e.g., Exploit-DB entry 40894) and that Microsoft MS13-0...

CVE-2013-0811

CVE-2013-0811 is a use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 that allows remote code execution when a user visits a crafted site triggering access to a deleted object. The underlying cause is memory corruption through use-after-free conditions. Impact is code execution i...

CVE-2013-1311

CVE-2013-1311 is a use-after-free vulnerability in Microsoft Internet Explorer 8. The flaw is triggered when a crafted page causes a deleted object to be accessed, with the DOM textNode pointer corruption occurring after style computation and being overwritten when innerHTML on the parent is set....

CVE-2013-0811

Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1307...

CVE-2013-1310

Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability."...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2829530)

This host is missing a critical security update according to Microsoft Bulletin MS13-037. OpenVAS Vulnerability Test $Id: secpodms13-037.nasl 6086 2017-05-09 09:03:30Z teissa $ Microsoft Internet Explorer Multiple Use After Free Vulnerabilities 2829530 Authors: Thanga Prakash S Copyright: Copyrig...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2829530)

This host is missing a critical security update according to Microsoft Bulletin MS13-037. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-1308

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka “Internet Explorer Use After Free Vulnerability,” a different vulnerability than CVE-2013-1309 and...

Microsoft Internet Explorer CVE-2013-1308 Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2013-1312 Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Internet Explorer Initialization Error Use-after-free (MS13-037; CVE-2013-1307)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer JSON Array CVE-2013-1297 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 6, 7, and 8 are vulnerable. Technologies Affected Avaya Aura Conferencing Standard Avaya...

Internet Explorer Layout Use-after-free Code Execution (MS13-037; CVE-2013-1310)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Microsoft Internet Explorer CVE-2013-0811 Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2013-1307 Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...