4365 matches found
CVE-2011-1252
Cross-site scripting XSS vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint...
CVE-2011-1260
Microsoft Internet Explorer 8 and 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "Layout Memory Corruption Vulnerability."...
Memory corruption
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "Link Properties Handling Memory Corruption Vulnerability."...
Memory corruption
Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "DOM Modification Memory Corruption Vulnerability."...
Information disclosure
Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different 1 domain or 2 zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability."...
CVE-2011-1255
CVE-2011-1255 affects Microsoft Internet Explorer 6–8, where the HTML+TIME (Timed Interactive Multimedia Extensions) implementation mishandles in-memory objects, enabling remote code execution via deleted/uninitialized HTML+TIME objects (notably t:transitionFilter). Connected reports confirm vuln...
CVE-2011-1250
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "Link Properties Handling Memory Corruption Vulnerability."...
CVE-2011-1260
CVE-2011-1260 affects Microsoft Internet Explorer 8 and 9, described as a memory handling vulnerability where an invalid or deleted in-memory object can be exploited to execute arbitrary code. The issue is commonly identified as a layout/memory corruption vulnerability (mshtml) and has public exp...
CVE-2011-1252
Cross-site scripting XSS vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint...
Microsoft Internet Explorer 8 MIME嗅探信息泄露漏洞
Bugtraq ID: 48200 CVE ID：CVE-2011-1246 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 下载某些内容时存在错误可被利用执行部分不可期的操作，获取其他域或Internet Explorer中的某些MIME信息。 Microsoft Internet Explorer 8 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://www.microsoft.com/technet/security/Bulletin/MS11-050.mspx...
Microsoft Internet Explorer拖放信息泄露漏洞
Bugtraq ID: 48201 CVE ID：CVE-2011-1258 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在某些内容上处理拖放事件时存在错误，可获取其他域或Internet Explorer域中的敏感信息。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP3 Microsoft Interne...
Microsoft Internet Explorer HTTP重定向未初始化内存远程代码执行漏洞
Bugtraq ID: 48211 CVE ID：CVE-2011-1262 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer处理HTTP 302重定向到CDL协议存在缺陷。当Internet Explorer判断哪个负责处理协议重定向时，未能维护一个正确的用于事务对象的引用计数器，结果可导致释放后使用漏洞，可以以应用程序上下文执行任意代码 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7...
Microsoft Internet Explorer Selection未初始化内存远程代码执行漏洞
Bugtraq ID: 48210 CVE ID：CVE-2011-1261 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 在部分点击事件过程中Internet explorer处理javascript语句'selection.empty'存在缺陷。通过触发特定序列的事件，攻击者可释放一个还在使用的CDisplayObject对象。对之前释放内存的操作可导致任意代码执行。 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7...
Microsoft Internet Explorer布局未初始化内存远程代码执行漏洞
No description provided by source...
Microsoft Internet Explorer link属性未初始化内存远程代码执行漏洞
Bugtraq ID: 48202 CVE ID：CVE-2011-1250 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在处理Link属性存在一个释放后使用错误，攻击者可以构建恶意WEB页，诱使用户解析，破坏内存，成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0...
Microsoft Internet Explorer VML内存破坏CVE-2011-1266远程代码执行漏洞
Bugtraq ID: 48173 CVE ID：CVE-2011-1266 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 从DOM解析VML对象时vgx.dll存在缺陷，具体来说，在页面结构过程中处理Imagedata参数时存在故障代码。通过向imagedata对象动态分配属性，进程会访问释放内存，成功利用漏洞可以应用程序上下文执行任意代码 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 8.0.7600.16385 Microsoft Internet...
Microsoft Internet Explorer 8 DOM处理未初始化内存远程代码执行漏洞
Bugtraq ID: 48203 CVE ID：CVE-2011-1251 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在处理DOM对象存在一个释放后使用错误，攻击者可以构建恶意WEB页，诱使用户解析，破坏内存，成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://www.microsoft.com/technet/security/Bulletin/MS11-050.mspx...
Microsoft Internet Explorer DOM编辑未初始化内存远程代码执行漏洞
Bugtraq ID: 48207 CVE ID：CVE-2011-1256 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 应用程序在多个JavaScipt修改文档的处理过程中存在缺陷。在某些情况下，应用程序会由于修改操作而释放对象，之后尝试销毁时会再次访问。重用可导致在应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0...
Microsoft Internet Explorer拖放未初始化内存远程代码执行漏洞
Bugtraq ID: 48204 CVE ID：CVE-2011-1254 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer在处理某些内容上的拖放事件时存在释放后使用错误，攻击者可以构建恶意WEB页，诱使用户解析，破坏内存，成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6....
Microsoft Internet Explorer 'toStaticHTML' HTML过滤嗅探信息泄露漏洞
Bugtraq ID: 48199 CVE ID：CVE-2011-1252 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 在过滤某些字符串时"toStaticHTML"函数存在错误，可泄露某些敏感信息。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 7.0 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...