Microsoft Internet Explorer Multiple Vulnerabilities (2675157)

This host is missing a critical security update according to Microsoft Bulletin MS12-023. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Remote code execution

Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Style Remote Code Execution Vulnerability."...

CVE-2012-0172

CVE-2012-0172 affects Microsoft Internet Explorer 6–8. The issue is a use-after-free in the vgx.dll path while processing certain VML behaviors, enabling remote code execution when a user visits a malicious page. Affected products include IE6/7/8 on multiple Windows versions; the root cause is me...

Internet Explorer VML Style Remote Code Execution (MS12-023; CVE-2012-0172)

A remote code execution vulnerability has been reported in Internet Explorer...

Microsoft Internet Explorer CVE-2012-0172 VML Style Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferenci...

ZDI-12-036 : Microsoft Internet Explorer VML CDispScroller Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-036 : Microsoft Internet Explorer VML CDispScroller Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-036 February 22, 2012 - -- CVE ID: CVE-2012-0155 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected...

Microsoft Internet Explorer VML CDispScroller Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the handling ...

Microsoft Internet Explorer 9 VML处理远程代码执行漏洞(MS12-010)

BUGTRAQ ID: 51935 CVE ID: CVE-2012-0155 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer在VML的处理上存在远程代码执行漏洞，攻击者可利用此漏洞执行任意代码，控制应用和计算机。 0 Microsoft Internet Explorer 9 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS12-010）以及相应补丁: MS12-010：Cumulative Security Update for...

Remote code execution

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "VML Remote Code Execution Vulnerability."...

CVE-2012-0155

CVE-2012-0155 affects Microsoft Internet Explorer 9 via a VML handling bug that can allow remote code execution when a deleted object is accessed. The vulnerability is rated CVSS v2 base 9.3 (HIGH) with network exploitability and no user interaction. Affected product: Internet Explorer 9; vulnera...

Internet Explorer VML Remote Code Execution (MS12-010; CVE-2012-0155)

A remote code execution vulnerability has been reported in Internet Explorer...

Microsoft Internet Explorer CVE-2012-0155 VML Handling Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...

CVE-2011-1266

The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...

Memory corruption

The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...

CVE-2011-1266

CVE-2011-1266 affects Microsoft Internet Explorer 6–8 via a vulnerability in vgx.dll handling of VML imagedata during DOM parsing, causing memory access to freed/uninitialized objects and enabling remote code execution. The issue is described as a VML memory corruption vulnerability, with the aff...

CVE-2011-1266

The Vector Markup Language VML implementation in vgx.dll in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, aka "VML Memory...

Microsoft Internet Explorer VML内存破坏CVE-2011-1266远程代码执行漏洞

Bugtraq ID: 48173 CVE ID：CVE-2011-1266 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 从DOM解析VML对象时vgx.dll存在缺陷，具体来说，在页面结构过程中处理Imagedata参数时存在故障代码。通过向imagedata对象动态分配属性，进程会访问释放内存，成功利用漏洞可以应用程序上下文执行任意代码 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 8.0.7600.16385 Microsoft Internet...

Internet Explorer Vector Markup Language Remote Code Execution Vulnerability (2544521)

This host is missing a critical security update according to Microsoft Bulletin MS11-052. OpenVAS Vulnerability Test $Id: secpodms11-052.nasl 6526 2017-07-05 05:43:52Z cfischer $ Internet Explorer Vector Markup Language Remote Code Execution Vulnerability 2544521 Authors: Veerendra GG Copyright:...

Microsoft Internet Explorer vgx.dll imagedata Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within vgx.dll while...

Internet Explorer VML related src URL Memory Corruption (MS11-052; CVE-2011-1266)

A remote code execution vulnerability has been reported in in the way that Microsoft Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker could exploit the vulnerability by constructing a specially crafted Web page.Successful...