4365 matches found
CVE-2011-1961
The CVE-2011-1961 issue affects Internet Explorer 6–9, where the telnet URI handler does not reliably load telnet.exe, allowing remote code execution when a user opens a crafted HTML/URL (e.g., via SMB-shared content). Exploitation relies on loading a telnet URI and may require user action to vie...
Microsoft Internet Explorer跨域本地Cookie文件访问安全绕过漏洞
Bugtraq ID: 47989 CVE ID：CVE-2011-2382 CVE-2011-2383 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在安全漏洞，允许攻击者获得敏感信息或在本地资源上执行某些操作。 1应用程序允许网络共享显示在iFrame中，设置iFrame引用"\127.0.0.1\c$"可诱使用户对本地文件夹和文件上执行某些操作CVE-2011-2383。 成功利用漏洞允许删除本地文件夹，把图片存储在本地文件件中或重命名本地文件和文件夹，但需要用户执行某些键盘或鼠标操作。...
Microsoft Internet Explorer窗口打开竞争条件远程代码执行漏洞
Bugtraq ID: 48994 CVE ID：CVE-2011-1257 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理窗口打开存在竞争条件漏洞。构建恶意WEB页，诱使用户使用Internet Explorer解析，会由于竞争条件而访问已破坏的对象，触发的内存破坏可以登录用户上下文执行任意代码 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商解决方案...
Microsoft Internet Explorer样式对象内存破坏远程代码执行漏洞
Bugtraq ID: 49039 CVE ID：CVE-2011-1964 Microsoft Internet Explorer是一款流行的WEB浏览器。 负责处理STYLE元素的的应用代码存在缺陷。创建一个无效行为的STYLE元素，攻击者可以迫使应用程序调用使用非法类型的对象，可导致堆内存破坏，构建恶意WEB页，诱使用户解析，可导致应用程序上下文执行任意代码 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet...
Microsoft Internet Explorer Shift JIS字符编码信息泄露漏洞
Bugtraq ID: 49032 CVE ID：CVE-2011-1962 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer Shift JIS字符编码处理存在安全问题，允许脚本访问其他域或Internet Explorer域中敏感信息。攻击者可以向WEB站点注入特制字符串来利用此楼哦的那个，当用户查看WEB站点时泄露敏感信息 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer...
Microsoft Internet Explorer事件处理器跨域信息泄露漏洞
Bugtraq ID: 49023 CVE ID：CVE-2011-1960 Microsoft Internet Explorer是一款流行的WEB浏览器。 应用程序的事件处理器存在安全漏洞，允许攻击者构建恶意WEB页，诱使用户解析，可查看其他域或Internet Explorer域中的敏感内容 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 厂商解决方案...
Microsoft Internet Explorer 保护模式绕过漏洞(Pwn2Own)
CVE ID：CVE-2011-1347 Microsoft Internet Explorer是一款流行的WEB浏览器。 Internet Explorer保护模式由中等完整性级别和低完整性级别的进程组成。低完整性进程只允许向特定低完整性位置写文件，写入的文件会被标记为低完整性文件。当启动一个新的Internet Explorer进程时会对启动的文件进行完整性级别检查，如果文件属于低完整性级别文件，那么会运行在低完整性模式下。但是如果给定某个文件更低的权限，应用程序在检查过程中由于不匹配'Low Integrity'，导致会以中级完整性级别运行之。攻击者可以利用此漏洞绕过保护模式提升特...
Microsoft Internet Explorer XSLT内存破坏远程代码执行漏洞
Bugtraq ID: 49037 CVE ID：CVE-2011-1963 Microsoft Internet Explorer是一款流行的WEB浏览器。 负责重载根文档root document对象标记的应用代码存在缺陷。在重载标记过程中，应用程序会派发一个通知，同时保留一个指向函数上下文中对象的引用。这允许事件回调篡改根文档对象，使用这个畸形对象可用于以应用程序上下文执行任意代码。 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 厂商解决方案...
Microsoft Internet Explorer Telnet URI处理器远程代码执行漏洞
Bugtraq ID: 49027 CVE ID：CVE-2011-1961 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer使用的telnet URI协议处理器存在一个远程代码执行漏洞，攻击者构建一个WEB页，诱使用户解析，可以登录用户上下文执行任意代码。 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0...
Microsoft Internet Explorer Telnet URI Handler Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a vulnerability that lets attackers execute arbitrary remote code. An attacker can exploit this issue by enticing a legitimate user to use a vulnerable version of the application to access an HTML file from a network share location that contains...
Internet Explorer Style Object Memory Corruption (MS11-057; CVE-2011-1964)
A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer attempts to access objects that have not been initialized or have been deleted. A remote attacker could trigger this flaw by enticing an unsuspecti...
Microsoft Internet Explorer Event Handlers Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to access local files or content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information that m...
Microsoft Internet Explorer XSLT SetViewSlave Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Microsoft Internet Explorer Window Open Race Condition Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aura...
Microsoft Internet Explorer XSLT Memory Corruption Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aura...
Microsoft Internet Explorer Style Object Memory Corruption Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aura...
Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Internet Explorer EUC-JP编码跨站脚本执行漏洞
Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer在实现上存在漏洞，远程攻击者可利用此漏洞执行跨站脚本攻击。 某些通过EUC-JP编码传递的字符在返回给用户之前没有正确过滤。可被利用执行任意HTML和脚本代码 Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 厂商补丁： Microsoft --------- 链接：http://www.microsoft.com/...
NSFOCUS SA2011-01 : Microsoft Internet Explorer Link Property Processing Memory Corruption Vulnerability
NSFOCUS Security AdvisorySA2011-01 Microsoft Internet Explorer Link Property Processing Memory Corruption Vulnerability Release Date: 2011-06-15 CVE ID: CVE-2011-1250 http://www.nsfocus.com/en/advisories/1101.html Affected Software and System: ============================= Microsoft Internet...
ZDI-11-195: Microsoft Internet Explorer selection.empty Remote Code Execution Vulnerability
ZDI-11-195: Microsoft Internet Explorer selection.empty Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-195 June 14, 2011 -- CVE ID: CVE-2011-1261 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Microsoft -- Affected Products: Microsoft Interne...