Showing 1 - 6 of 6

Files from Alexandre Pelletier

First Active	2010-04-01
Last Active	2013-08-30

Microsoft Internet Explorer "ReplaceAdjacentText" Use-After-Free: Posted Aug 30, 2013; Authored by Alexandre Pelletier, VUPEN | Site vupen.com; VUPEN Vulnerability Research Team discovered a critical vulnerability in Microsoft Internet Explorer. The vulnerability is caused by a use-after-free error within the MSHTML "SlayoutRun::GetCharacters()" function when replacing a text adjacent to an element, which could be exploited by remote attackers to compromise a vulnerable system.; tags | advisory, remote; MD5 | 8c4344194f6ec36ff3585d9f6be72702; Download | Favorite | Comments (0)

Microsoft Internet Explorer Fixed Table Col Span Heap Overflow: Posted Aug 1, 2012; Authored by Alexandre Pelletier | Site metasploit.com; This Metasploit module exploits a heap overflow vulnerability in Internet Explorer caused by an incorrect handling of the span attribute for col elements from a fixed table, when they are modified dynamically by javascript code.; tags | exploit, overflow, javascript; advisories | CVE-2012-1876, OSVDB-82866; MD5 | 779949c97029d653dbfeebf52387ec06; Download | Favorite | Comments (0)

Microsoft Internet Explorer Col Element Remote Heap Overflow: Posted Jun 20, 2012; Authored by Alexandre Pelletier, VUPEN | Site vupen.com; VUPEN Vulnerability Research Team discovered a critical vulnerability in Microsoft Internet Explorer. The vulnerability is caused by a heap overflow error in the mshtml.dll module when processing "Col" elements, which could allow remote attackers to leak memory and execute arbitrary code despite ASLR and DEP.; tags | advisory, remote, overflow, arbitrary; advisories | CVE-2012-1876; MD5 | d6f32f221551f0216f61f02dec616d81; Download | Favorite | Comments (0)

Novell GroupWise Calendar BYWEEKNO Memory Corruption: Posted Sep 28, 2011; Authored by Alexandre Pelletier, VUPEN | Site vupen.com; VUPEN Vulnerability Research Team discovered a critical vulnerability in Novell GroupWise. The vulnerability is caused by a buffer overflow error in the "ICalProcessYearlyRule()" function within the "gwwww1.dll" component when processing a malformed "BYWEEKNO" property in a Calendar, which could be exploited by remote unauthenticated attackers to compromise a vulnerable server via a specially crafted email message. Versions 8.0.2 SP2 Hot Patch 2 and below are affected.; tags | advisory, remote, overflow; MD5 | bc4052bb5ae1cf1a84f7ebdc7fcb277b; Download | Favorite | Comments (0)

Sun Java JDK/JRE AWT Library Invalid Index: Posted Apr 1, 2010; Authored by Alexandre Pelletier | Site vupen.com; VUPEN Vulnerability Research Team discovered a vulnerability in Sun Java JDK/JRE. The flaw is caused by an invalid index within the AWT (Abstract Windowing Toolkit) library when processing data passed to a specific function, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.; tags | advisory, java, web, arbitrary; MD5 | d6c2756850cbec3cdd47314615abb039; Download | Favorite | Comments (0)

Sun Java JDK/JRE AWT Library Invalid Pointer: Posted Apr 1, 2010; Authored by Alexandre Pelletier | Site vupen.com; VUPEN Vulnerability Research Team discovered a vulnerability in Sun Java JDK/JRE. The flaw is caused by an invalid pointer within the AWT (Abstract Windowing Toolkit) library when processing data passed to a specific function, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.; tags | advisory, java, web, arbitrary; MD5 | b3709ac64aa12254a725e9208e38873e; Download | Favorite | Comments (0)

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days