Lucene search
K

13 matches found

0day.today
0day.today
added 2013/10/02 12:0 a.m.52 views

Microsoft Internet Explorer SetMouseCapture Use-After-Free

This Metasploit module exploits a use-after-free vulnerability that targets Internet Explorer 9 on Windows 7. The flaw most likely exists in versions 6/7/8/9/10/11. It was initially found in the wild in Japan, but other regions such as English, Chinese, Korean, etc, were targeted as well. The...

9.3CVSS0.82607EPSS
Exploits18
Zero Day Initiative
Zero Day Initiative
added 2013/07/26 12:0 a.m.28 views

Microsoft Internet Explorer CElement Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.5CVSS4.3AI score0.10951EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2013/02/14 12:0 a.m.35 views

Microsoft Internet Explorer SetCapture Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

6.8CVSS2.7AI score0.4569EPSS
Exploits0References1
NVD
NVD
added 2013/02/13 12:4 p.m.17 views

CVE-2013-0018

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SetCapture Use After Free Vulnerability."...

9.3CVSS7.3AI score0.4569EPSS
Exploits0References3
Prion
Prion
added 2013/02/13 12:4 p.m.15 views

Double free

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SetCapture Use After Free Vulnerability."...

9.3CVSS7.8AI score0.4569EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2013/02/13 12:4 p.m.1 views

CVE-2013-0018

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SetCapture Use After Free Vulnerability."...

9.3CVSS6.1AI score0.4569EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2013/02/13 12:0 a.m.40 views

Microsoft Internet Explorer Multiple Vulnerabilities (2792100)

This host is missing a critical security update according to Microsoft Bulletin MS13-009. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.86052EPSS
Exploits17References15
NVD
NVD
added 2009/06/10 6:30 p.m.13 views

CVE-2009-1529

Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafte...

9.3CVSS7.5AI score0.59857EPSS
Exploits1References9
Prion
Prion
added 2009/06/10 6:30 p.m.14 views

Memory corruption

Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafte...

9.3CVSS8.1AI score0.59857EPSS
Exploits1References9Affected Software1
Vulnrichment
Vulnrichment
added 2009/06/10 6:0 p.m.8 views

CVE-2009-1529

Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafte...

7.5AI score0.59857EPSS
Exploits1References9
Zero Day Initiative
Zero Day Initiative
added 2009/06/10 12:0 a.m.29 views

Microsoft Internet Explorer setCapture Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific vulnerability exists when calling the setCapture...

9.3CVSS4.1AI score0.59857EPSS
Exploits1References1
Check Point Advisories
Check Point Advisories
added 2009/06/09 12:0 a.m.6 views

Internet Explorer SetCapture Calls Improper Handling (MS09-019; CVE-2009-1529)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To...

9.3CVSS7.4AI score0.59857EPSS
Exploits1
Symantec
Symantec
added 2009/06/09 12:0 a.m.15 views

Microsoft Internet Explorer 'setCapture()' Uninitialized Memory Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the browser. Successful exploits will compromise the browser and possibly the computer. Failed attacks may cause...

8AI score
Exploits0References2Affected Software4
Rows per page
Query Builder