1223 matches found
CVE-2016-0187
Technical details for CVE-2016-0187 are not provided in the connected documents. The sources discuss related CVEs (e.g., CVE-2016-0189) and EK activity, but no product/version/impact specifics or remediation for 2016-0187 are given.
CVE-2016-0189
CVE-2016-0189 is a memory-corruption flaw in Microsoft JScript/VBScript engines used by Internet Explorer 9–11 that attackers could trigger via crafted web content to achieve remote code execution or memory corruption. Connected sources show exploitation within exploit kits (notably Neutrino/Nept...
Microsoft Windows JScript and VBScript Remote Code Execution Vulnerabilities (3156764)
This host is missing a critical security update according to Microsoft Bulletin MS16-053. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2016-0187
The Microsoft 1 JScript 5.8 and 2 VBScript 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Scripting Engine Memory Corruption Vulnerability,” a...
MS16-053: Description of the security update for JScript and VBScript 5.8: May 10, 2016
None None...
MS16-053: Description of the security update for JScript and VBScript 5.7: May 10, 2016
None None...
KLA10805 Multiple vulnerabilities in the JScript and VBScript
Multiple serious vulnerabilities have been found in Microsoft JScript and VBScript. Malicious users can exploit these vulnerabilities to execute arbitrary code. Technical details Improper objects handling in memory in Internet Explorer can be exploited remotely via a specially designed web conten...
MS16-053: Cumulative Security Update for JScript and VBScript (3156764)
The remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities in the JScript and VBScript engines due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing...
Microsoft Internet Explorer Memory Corruption (MS16-051: CVE-2016-0189)
A use after free vulnerability exists in Microsoft Internet Explorer. The root cause is a heap corruption when dealing with a corrupted VBScript array size. A successful exploitation of this issue could allow an attacker to execute arbitrary code on the remote system...
Microsoft Internet Explorer CVE-2016-0187 Scripting Engine Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...
VulnCheck KEV: CVE-2016-0189
The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service memory corruption via a crafted web site...
PT-2016-3361 · Microsoft · Vbscript Engine +3
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 9 through 11 JScript engine version 5.8 VBScript engine versions 5.7 and 5.8 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...
MS16-053: Cumulative security update for JScript and VBScript: May 10, 2016
Resolves vulnerabilities in Windows that could allow remote code execution if a user visits a specially crafted website.SummaryThis security update resolves vulnerabilities in the JScript and VBScript scripting engines in Microsoft Windows. The vulnerabilities could allow remote code execution if...
PT-2016-4091 · Microsoft · Vbscript Engine +3
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 9 through 11 JScript engine version 5.8 VBScript engine version 5.8 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web...
Core Windows Utility Can Be Used to Bypass AppLocker
A core Windows command-line utility, Regsvr32, used to register DLLs to the Windows Registry can be abused to run remote code from the Internet, bypassing whitelisting protections such as Microsoft’s AppLocker. A researcher who requested anonymity found and privately disclosed the issue to...
PowerShell used for spreading Trojan.Laziok through Google Docs
Introduction Through our multi-flow detection capability, we recently identified malicious actors spreading Trojan.Laziok malware via Google Docs. We observed that the attackers managed to upload the payload to Google Docs in March 2016. During the brief time it was live, users accessing the...
GongDa vs. Korean News
On Jan. 27, we observed visitors to a Korean news site being redirected to the GongDa Exploit Kit EK, potentially exposing them to malware infection. We will be referring to this site as KNS. GongDa is an exploit kit that can compromise vulnerable endpoints by use of exploits, allowing harmful...
GongDa vs. Korean News
On Jan. 27, we observed visitors to a Korean news site being redirected to the GongDa Exploit Kit EK, potentially exposing them to malware infection. We will be referring to this site as KNS. GongDa is an exploit kit that can compromise vulnerable endpoints by use of exploits, allowing harmful...
GitLab: Markdown based stored XSS (IE only)
Hello, My other report 116697 deals with any browser even through its not a direct XSS as it doesn't execute in the context of the site. But here is another type of XSS using vbscript: which affects only IE users but executes on the context of the site check the screenshot for POC...
Maimed Ramnit Still Lurking in the Shadow
Newspapers have the ability to do more than simply keep us current with worldly affairs; we can use them to squash bugs! Yet, as we move from waiting on the newspaper delivery boy to reading breaking news on ePapers, we lose the subtle art of bug squashing. Instead, we end up exposing ourselves t...