usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font aka \Uniscribe Font Parsing Engine Memory Corruption Vulnerability.\


Microsoft Excel 2007 SP3 2010 SP1 and SP2 2013 and 2013 RT; Office 2007 SP3 2010 SP1 and SP2 2013 and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Excel Memory Corruption Vulnerability.\

memory corruption
arbitrary code execution


Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office document aka \Memory Corruption Vulnerability.\


Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document aka \Memory Corruption Vulnerability.\


A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated attacker to execute arbitrary code with root user privileges during SAML authentication. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.9; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1. Prisma Access customers with Prisma Access 2.1 Preferred firewalls are impacted by this issue.


A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.


Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via \unexpected method calls to HTML objects \ aka \DHTML Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates modifies deletes and accesses document objects using the tags property which triggers heap corruption related to uninitialized or deleted objects a different issue than CVE-2007-3902 and CVE-2007-3903 and a variant of \Uninitialized Memory Corruption Vulnerability.\


Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01 6 SP1 and 7 allows remote attackers to execute arbitrary code via unknown vectors related to Microsoft Visual Basic 6 objects and memory corruption aka \ActiveX Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function a different issue than CVE-2007-3902 and CVE-2007-5344 a variant of \Uninitialized Memory Corruption Vulnerability.\


Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element one variant of \Uninitialized Memory Corruption Vulnerability.\


Microsoft Excel 2000 SP3 2002 SP3 2003 SP2 and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malformed Excel file involving the \denoting of the start of a Workspace designation\ which results in memory corruption aka the \Workbook Memory Corruption Vulnerability\.


Microsoft Internet Explorer 5.01 6 and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object related to prototype variables and table cells aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request which allows remote attackers to execute arbitrary code aka the \CMS Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2 or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista allows remote attackers to execute arbitrary code via certain property methods that may trigger memory corruption aka \Property Memory Corruption Vulnerability.\


Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; and 6 on Windows XP SP2 or Windows Server 2003 SP1 or SP2 allows remote attackers to execute arbitrary code by calling deleteCell on a named table row in a named table column then accessing the column which causes Internet Explorer to access previously deleted objects aka the \Uninitialized Memory Corruption Vulnerability.\


Double free vulnerability in qedit.dll in DirectShow in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via a crafted JPEG image aka \DirectShow Memory Corruption Vulnerability.\


The Direct2D implementation in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a large 2D geometric figure that is encountered with Internet Explorer aka \Microsoft Graphics Component Memory Corruption Vulnerability.\


mshtmled.dll in Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code via a crafted Microsoft Office document that causes the HtmlDlgHelper class destructor to access uninitialized memory aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory in certain circumstances involving use of Microsoft Word to read Word documents which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Object Memory Corruption Vulnerability.\


fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly parse FAX cover pages which allows remote attackers to execute arbitrary code via a crafted .cov file aka \Fax Cover Page Editor Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Element Memory Corruption Vulnerability.\


Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object aka \Uninitialized Memory Corruption Vulnerability.\


pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format aka \Array Indexing Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Excel 2002 SP3 does not properly validate formula information which allows remote attackers to execute arbitrary code via a crafted Excel document aka \Formula Substream Memory Corruption Vulnerability.\


Use-after-free vulnerability in Microsoft Internet Explorer 6 7 and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (CSS) token sequences and the clip attribute aka an \invalid flag reference\ issue or \Uninitialized Memory Corruption Vulnerability \ as exploited in the wild in November 2010.


Microsoft Excel 2002 SP3 Office 2004 and 2008 for Mac and Open XML File Format Converter for Mac do not properly validate record information which allows remote attackers to execute arbitrary code via a crafted Excel document aka \Excel Record Parsing Memory Corruption Vulnerability.\


Microsoft Internet Explorer 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Element Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


The Uniscribe (aka new Unicode Script Processor) implementation in USP10.DLL in Microsoft Windows XP SP2 and SP3 Server 2003 SP2 Vista SP1 and SP2 and Server 2008 Gold and SP2 and Microsoft Office XP SP3 2003 SP3 and 2007 SP2 does not properly validate tables associated with malformed OpenType fonts which allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) Office document aka \Uniscribe Font Parsing Engine Memory Corruption Vulnerability.\


The Word 97 text converter in the WordPad Text Converters in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly parse malformed structures in Word 97 documents which allows remote attackers to execute arbitrary code via a crafted document containing an unspecified value that is used in a loop counter aka \WordPad Word 97 Text Converter Memory Corruption Vulnerability.\


Microsoft Windows Media Player (WMP) 9 through 12 does not properly deallocate objects during a browser reload action which allows user-assisted remote attackers to execute arbitrary code via crafted media content referenced in an HTML document aka \Windows Media Player Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Layout Memory Corruption Vulnerability.\


Microsoft Internet Explorer 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-3671 CVE-2009-3674 CVE-2010-0245 and CVE-2010-0246.


Microsoft Internet Explorer 6 6 SP1 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-2530 and CVE-2009-2531.


Unspecified vulnerability in Microsoft Office Excel 2002 SP3 2003 SP3 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via an Excel file with a crafted SxView record related to improper validation of unspecified structures aka \Excel Record Parsing Memory Corruption Vulnerability \ a different vulnerability than CVE-2010-0824 and CVE-2010-1245.


Microsoft Office Visio 2002 SP2 2003 SP3 and 2007 SP1 and SP2 does not properly validate attributes in Visio files which allows remote attackers to execute arbitrary code via a crafted file aka \Visio Attribute Validation Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 6 SP1 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Object Memory Corruption Vulnerability.\


Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4 6 and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler aka \HTML Object Memory Corruption Vulnerability.\


Unspecified vulnerability in the Windows OpenType Compact Font Format (CFF) driver in Microsoft Windows 2000 SP4 XP SP2 and SP3 Server 2003 SP2 Vista SP1 and SP2 Server 2008 SP2 and R2 and Windows 7 allows local users to execute arbitrary code via unknown vectors related to improper validation when copying data from user mode to kernel mode aka \OpenType CFF Font Driver Memory Corruption Vulnerability.\


Use-after-free vulnerability in Microsoft Internet Explorer 6 6 SP1 7 and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold SP1 and SP2; Windows Server 2008 Gold SP2 and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object related to incorrectly initialized memory and improper handling of objects in memory as exploited in the wild in December 2009 and January 2010 during Operation Aurora aka \HTML Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 6 SP1 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4 6 on Windows XP SP2 and SP3 and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that triggers memory corruption in the CTDCCtl::SecurityCHeckDataURL function aka \Memory Corruption Vulnerability.\


Microsoft Internet Explorer 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-3671 CVE-2009-3674 and CVE-2010-0246.


VBE6.DLL in Microsoft Office XP SP3 Office 2003 SP3 2007 Microsoft Office System SP1 and SP2 Visual Basic for Applications (VBA) and VBA SDK 6.3 through 6.5 does not properly search for ActiveX controls that are embedded in documents which allows remote attackers to execute arbitrary code via a crafted document aka \VBE6.DLL Stack Memory Corruption Vulnerability.\


Unspecified vulnerability in Microsoft Office Excel 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed WOPT (0x80B) record aka \Excel Record Memory Corruption Vulnerability \ a different vulnerability than CVE-2010-0821 and CVE-2010-1245.


Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format which allows remote attackers to execute arbitrary code via a crafted spreadsheet aka \Microsoft Office Excel Record Memory Corruption Vulnerability.\


Microsoft Internet Explorer 7 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing a deleted object leading to memory corruption aka \HTML Rendering Memory Corruption Vulnerability.\


Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior the CTimeAction object and destruction of markup leading to memory corruption aka \HTML Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 5.01 SP4 6 and 6 SP1 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


Unspecified vulnerability in Microsoft Office Excel 2002 SP3 2003 SP3 2007 SP1 and SP2; Office 2004 for mac; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 and SP2; allows remote attackers to execute arbitrary code via a crafted Excel file aka \Excel Memory Corruption Vulnerability \ a different vulnerability than CVE-2010-1247 and CVE-2010-1249.


Microsoft Internet Explorer 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-3671 CVE-2009-3674 and CVE-2010-0245.


Microsoft Office Visio 2002 SP2 2003 SP3 and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files which allows remote attackers to execute arbitrary code via a crafted file aka \Visio Index Calculation Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 6 SP1 and 7 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6 6 SP1 and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object as exploited in the wild in March 2010 aka \Uninitialized Memory Corruption Vulnerability.\


The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1 SP2 and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Element Memory Corruption Vulnerability.\


Unspecified vulnerability in Microsoft Office Excel 2002 SP3 Office 2004 for Mac Office 2008 for Mac and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with a malformed SxView (0xB0) record aka \Excel Record Memory Corruption Vulnerability \ a different vulnerability than CVE-2010-0824 and CVE-2010-0821.


Microsoft Internet Explorer 6 SP1 and SP2 7 and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1 SP2 and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


Unspecified vulnerability in Microsoft IIS 6.0 7.0 and 7.5 when Extended Protection for Authentication is enabled allows remote authenticated users to execute arbitrary code via unknown vectors related to \token checking\ that trigger memory corruption aka \IIS Authentication Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 SP1 and SP2 7 and 8 allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption related to the CStyleSheet object and a free of the root container aka \Memory Corruption Vulnerability.\


Unspecified vulnerability in Microsoft Office Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel file with a malformed RTD (0x813) record that triggers heap corruption aka \Excel Memory Corruption Vulnerability \ a different vulnerability than CVE-2010-0823 and CVE-2010-1249.


GDI+ in Microsoft Internet Explorer 6 SP1 Windows XP SP2 and SP3 Windows Server 2003 SP2 Office XP SP3 Office 2003 SP3 2007 Microsoft Office System SP1 and SP2 Office Project 2002 SP1 Visio 2002 SP2 Office Word Viewer Word Viewer 2003 Gold and SP3 Office Excel Viewer 2003 Gold and SP3 Office Excel Viewer Office PowerPoint Viewer 2007 Gold SP1 and SP2 Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 and SP2 Expression Web Expression Web 2 Groove 2007 Gold and SP1 Works 8.5 SQL Server 2000 Reporting Services SP2 SQL Server 2005 SP2 and SP3 Report Viewer 2005 SP1 Report Viewer 2008 Gold and SP1 and Forefront Client Security 1.0 does not properly allocate an unspecified buffer which allows remote attackers to execute arbitrary code via a crafted TIFF image file that triggers memory corruption aka \GDI+ TIFF Memory Corruption Vulnerability.\


The Web Services on Devices API (WSDAPI) in Windows Vista Gold SP1 and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages which allows remote attackers to execute arbitrary code via a crafted (1) message or (2) response aka \Web Services on Devices API Memory Corruption Vulnerability.\


Microsoft Windows Media Format Runtime 9.0 9.5 and 11; and Microsoft Media Foundation on Windows Vista Gold SP1 and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory corruption aka \Windows Media Playback Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 6 SP1 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-2530.


The Internet Authentication Service (IAS) in Microsoft Windows Vista SP2 and Server 2008 SP2 does not properly validate MS-CHAP v2 Protected Extensible Authentication Protocol (PEAP) authentication requests which allows remote attackers to execute arbitrary code via crafted structures in a malformed request aka \Internet Authentication Service Memory Corruption Vulnerability.\


GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption aka \Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 6 SP1 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-2531.


Microsoft Office Excel 2002 SP3 and 2003 SP3 and Office Excel Viewer 2003 SP3 does not properly parse the Excel file format which allows remote attackers to execute arbitrary code via a spreadsheet with a malformed record object aka \Excel SxView Memory Corruption Vulnerability.\


Microsoft Internet Explorer 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-3671.


Microsoft Internet Explorer 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-3674.


Microsoft Office Excel 2002 SP3 2003 SP3 and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a spreadsheet with a FEATHEADER record containing an invalid cbHdrData size element that affects a pointer offset aka \Excel Featheader Record Memory Corruption Vulnerability.\


Microsoft Office Excel 2002 SP3 2003 SP3 and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a spreadsheet with a crafted formula embedded in a cell aka \Excel Formula Parsing Memory Corruption Vulnerability.\


Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Office Excel 2002 SP3 and 2003 SP3 Office 2004 and 2008 for Mac Open XML File Format Converter for Mac and Office Excel Viewer 2003 SP3 do not properly parse the Excel file format which allows remote attackers to execute arbitrary code via a crafted spreadsheet aka \Excel Cache Memory Corruption Vulnerability.\


Microsoft Office Excel 2002 SP3 Office 2004 and 2008 for Mac and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a spreadsheet containing a malformed object that triggers memory corruption related to \loading Excel records \ aka \Excel Document Parsing Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory that (1) were not properly initialized or (2) are deleted which allows remote attackers to execute arbitrary code via vectors involving a call to the getElementsByTagName method for the STYLE tag name selection of the single element in the returned list and a change to the outerHTML property of this element related to Cascading Style Sheets (CSS) and mshtml.dll aka \HTML Object Memory Corruption Vulnerability.\ NOTE: some of these details are obtained from third party information. NOTE: this issue was originally assigned CVE-2009-4054 but Microsoft assigned a duplicate identifier of CVE-2009-3672. CVE consumers should use this identifier instead of CVE-2009-4054.


Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3 Server 2003 SP2 Vista Gold SP1 and SP2 and Server 2008 Gold and SP2 do not properly handle table operations which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element related to the getElementsByTagName method aka \HTML Objects Memory Corruption Vulnerability.\


Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3 Server 2003 SP2 Vista Gold SP1 and SP2 and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory which allows remote attackers to execute arbitrary code via an HTML document containing embedded style sheets that modify unspecified rule properties that cause the behavior element to be \improperly processed \ aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Internet Explorer 8 for Windows XP SP2 and SP3; 8 for Server 2003 SP2; 8 for Vista Gold SP1 and SP2; and 8 for Server 2008 SP2 does not properly handle objects in memory which allows remote attackers to execute arbitrary code via \malformed row property references\ that trigger an access of an object that (1) was not properly initialized or (2) is deleted leading to memory corruption aka \HTML Objects Memory Corruption Vulnerability\ or \HTML Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the \insertion deletion and attributes of a table cell \ which trigger memory corruption when the window is destroyed aka \DHTML Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold SP1 and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests which allows allows remote attackers to execute arbitrary code via a large number of concurrent asynchronous XMLHttpRequest calls aka \HTML Object Memory Corruption Vulnerability.\


Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold SP1 and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers which triggers an access of an object that (1) was not properly initialized or (2) is deleted aka \HTML Objects Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3 Server 2003 SP2 Vista Gold SP1 and SP2 and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption aka \Memory Corruption Vulnerability.\


Microsoft Office PowerPoint 2000 SP3 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format leading to memory corruption aka \PP7 Memory Corruption Vulnerability \ a different vulnerability than CVE-2009-1129.


Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold SP1 and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold SP1 and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code via frequent calls to the getElementsByTagName function combined with the creation of an object during reordering of elements followed by an onreadystatechange event which triggers an access of an object that (1) was not properly initialized or (2) is deleted aka \HTML Object Memory Corruption Vulnerability.\


Microsoft Internet Explorer 5.01 SP4 6 SP1 6 and 7 on Windows XP SP2 and SP3 6 and 7 on Windows Server 2003 SP1 and SP2 7 on Windows Vista Gold and SP1 and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted aka \Uninitialized Memory Corruption Vulnerability.\


Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4 XP SP2 and SP3 and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file that contains malformed data aka \WordPad and Office Text Converter Memory Corruption Vulnerability.\


Microsoft Internet Explorer 7 when XHTML strict mode is used allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets (CSS) stylesheet in a crafted HTML document aka \CSS Memory Corruption Vulnerability.\


Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object aka \Array Indexing Memory Corruption Vulnerability.\


Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format leading to improper \array indexing\ and memory corruption aka \PP7 Memory Corruption Vulnerability.\


Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files which allows remote attackers to execute arbitrary code via a crafted file aka \Memory Corruption Vulnerability.\


Microsoft Office PowerPoint 2000 SP3 2002 SP3 2003 SP3 and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter for Mac; Microsoft Works 8.5 and 9.0; and Microsoft Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 and SP2 do not properly validate PowerPoint files which allows remote attackers to execute arbitrary code via multiple crafted BuildList records that include ChartBuild containers which triggers memory corruption aka \Memory Corruption Vulnerability.\


Microsoft Office Visio 2002 SP2 2003 SP3 and 2007 SP1 does not properly perform memory copy operations for object data which allows remote attackers to execute arbitrary code via a crafted Visio document aka \Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 SP1 6 and 7 on Windows XP SP2 and SP3 6 and 7 on Windows Server 2003 SP1 and SP2 7 on Windows Vista Gold and SP1 and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements aka \Page Transition Memory Corruption Vulnerability.\


Excel in Microsoft Office 2000 SP3 Office XP SP3 Office 2003 SP3 and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object aka \Field Sanitization Memory Corruption Vulnerability.\


Microsoft Exchange 2000 Server SP3 Exchange Server 2003 SP2 and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties which allows remote attackers to execute arbitrary code via a crafted TNEF message aka \Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 SP1 6 and 7 on Windows XP SP2 and SP3 6 and 7 on Windows Server 2003 SP1 and SP2 7 on Windows Vista Gold and SP1 and 7 on Windows Server 2008 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects which allows remote attackers to execute arbitrary code via a crafted HTML document related to CFunctionPointer and the appending of document objects aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Office PowerPoint 2000 SP3 2002 SP3 and 2003 SP3 and PowerPoint in Microsoft Office 2004 for Mac allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen aka \Memory Corruption Vulnerability.\


Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 6 SP1 6 on Windows XP SP2 and SP3 and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted aka \Uninitialized Memory Corruption Vulnerability.\


Microsoft Office Excel 2000 SP3 2002 SP3 2003 SP3 and 2007 SP1; Excel in Microsoft Office 2004 and 2008 for Mac; Microsoft Office Excel Viewer and Excel Viewer 2003 SP3; and Microsoft Office Compatibility Pack for Word Excel and PowerPoint 2007 File Formats SP1 do not properly parse the Excel spreadsheet file format which allows remote attackers to execute arbitrary code via a crafted spreadsheet that contains a malformed object with \an offset and a two-byte value\ that trigger a memory calculation error aka \Memory Corruption Vulnerability.\


Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document aka \Microsoft Office Memory Corruption Vulnerability.\


ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


Internet

Explorer

in

Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

Internet

Explorer

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allow

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

Internet

Explorer

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11793 CVE-2017-11796 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11812 and CVE-2017-11821.


ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore

and

Microsoft

Edge

in

Windows

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft Edge accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8731 CVE-2017-8734 and CVE-2017-8751.


ChakraCore

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

ChakraCore

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Internet

Explorer

in

Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 and CVE-2017-11812.


ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore

and

Microsoft

Edge

in

Windows

Gold

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore

and

Windows

Gold

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Microsoft Edge in Microsoft Windows 10 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft Edge scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 and CVE-2017-8756.


ChakraCore

and

Windows

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Microsoft Edge in Microsoft Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11812 and CVE-2017-11821.


ChakraCore

and

Windows

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11813.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11822.


ChakraCore

and

Internet

Explorer

in

Microsoft

Windows

Windows

Server

Windows

and

Windows

RT

Windows

Server

Windows

Gold

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11798 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


ChakraCore

and

Microsoft

Edge

in

Windows

and

Windows

Server

allows

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

the

scripting

engine

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how Microsoft Edge handles objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\.


Microsoft

Windows

Windows

Server

and

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allow

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

how

Internet

Explorer

handles

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11792 CVE-2017-11793 CVE-2017-11796 CVE-2017-11797 CVE-2017-11799 CVE-2017-11800 CVE-2017-11801 CVE-2017-11802 CVE-2017-11804 CVE-2017-11805 CVE-2017-11806 CVE-2017-11807 CVE-2017-11808 CVE-2017-11809 CVE-2017-11810 CVE-2017-11811 CVE-2017-11812 and CVE-2017-11821.


Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018 Rakuraku Hagaki 2017 Rakuraku Hagaki 2016) and Rakuraku Hagaki Select for Ichitaro (Ichitaro 2017 Ichitaro 2016 Ichitaro 2015 Ichitaro Pro3 Ichitaro Pro2 Ichitaro Pro Ichitaro 2011 Ichitaro Government 8 Ichitaro Government 7 Ichitaro Government 6 and Ichitaro 2017 Trial version) allows attackers to execute arbitrary code with privileges of the application via specially crafted file.


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 and CVE-2017-8672.


Microsoft Edge in Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Internet Explorer accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8749.


Microsoft browsers in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft Edge scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft Edge scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Microsoft browsers in Microsoft Windows 7 Windows Server 2008 and R2 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8598 CVE-2017-8596 CVE-2017-8618 CVE-2017-8619 CVE-2017-8610 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8595 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609


Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8499 CVE-2017-8520 CVE-2017-8548 and CVE-2017-8549.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft Edge accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8734 CVE-2017-8751 and CVE-2017-11766.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8519.


Microsoft Edge in Microsoft Windows 10 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Internet Explorer in Microsoft Windows Server 2008 SP2 and Windows Server 2012 allows an attacker to execute arbitrary code in the context of the current user due to Internet Explorer improperly accessing objects in memory aka \Internet Explorer Memory Corruption Vulnerability\.


Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8520 CVE-2017-8521 CVE-2017-8548 and CVE-2017-8549.


Microsoft Edge in Microsoft Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Microsoft browsers in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft Edge scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Microsoft browsers in Microsoft Windows 7 Windows Server 2008 and R2 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8598 CVE-2017-8596 CVE-2017-8618 CVE-2017-8619 CVE-2017-8610 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8595 CVE-2017-8606 CVE-2017-8608 and CVE-2017-8609


Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8499 CVE-2017-8521 CVE-2017-8548 and CVE-2017-8549.


Microsoft Edge in Microsoft Windows 10 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8596 CVE-2017-8610 CVE-2017-8598 CVE-2017-8618 CVE-2017-8619 CVE-2017-8595 CVE-2017-8601 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft Edge accesses objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 and CVE-2017-11764.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft Edge accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8731 CVE-2017-8751 and CVE-2017-11766.


Microsoft browsers in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8517 and CVE-2017-8522.


Microsoft Edge in Microsoft Windows 10 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way affected Microsoft scripting engines render when handling objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft Edge scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 and R2 SP1 Windows 8.1 and Windows RT 8.1 and Windows Server 2012 and R2 allow an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8547.


Microsoft browsers in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers improperly handling objects in memory while rendering content aka \Microsoft Browser Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8653.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8598 CVE-2017-8610 CVE-2017-8595 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8596 CVE-2017-8610 CVE-2017-8618 CVE-2017-8619 CVE-2017-8595 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browsers access objects in memory aka \Microsoft Browser Memory Corruption Vulnerability\.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8596 CVE-2017-8601 CVE-2017-8618 CVE-2017-8619 CVE-2017-8610 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8598 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 R2 and Microsoft Edge and Internet Explorer in Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8517 and CVE-2017-8524.


Microsoft Edge in Microsoft Windows 10 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8596 CVE-2017-8610 CVE-2017-8618 CVE-2017-8619 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 CVE-2017-8598 and CVE-2017-8609.


Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8522 and CVE-2017-8524.


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft Edge scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8497.


Microsoft Edge in Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Internet Explorer in Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Internet Explorer aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8596 CVE-2017-8610 CVE-2017-8618 CVE-2017-8619 CVE-2017-8595 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how affected Microsoft scripting engines handle objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-11794 and CVE-2017-11803.


Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1 and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user when Internet Explorer improperly accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability\.


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 and Internet Explorer and Microsoft Edge in Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to the way that the Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8755 CVE-2017-8756 and CVE-2017-11764.


Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8496.


Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8598 CVE-2017-8596 CVE-2017-8595 CVE-2017-8618 CVE-2017-8619 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to how Microsoft Windows Text Services Framework handles objects in memory aka \Windows Shell Memory Corruption Vulnerability\.


Microsoft browsers in Microsoft Windows Server 2008 and R2 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engines fail to render when handling objects in memory in Microsoft browsers aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8598 CVE-2017-8596 CVE-2017-8610 CVE-2017-8601 CVE-2017-8618 CVE-2017-8619 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8595 CVE-2017-8606 CVE-2017-8607 and CVE-2017-8609


Microsoft Edge in Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8596 CVE-2017-8601 CVE-2017-8618 CVE-2017-8619 CVE-2017-8610 CVE-2017-8601 CVE-2017-8603 CVE-2017-8604 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Microsoft Edge in Windows 10 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8657 CVE-2017-8670 CVE-2017-8671 and CVE-2017-8674.


Microsoft

browsers

in

Microsoft

Windows

Windows

Server

Windows

and

Windows

RT

Windows

Server

and

Windows

Gold

and

Windows

Server

allow

an

attacker

to

execute

arbitrary

code

in

the

context

of

the

current

user

due

to

the

way

that

JavaScript

engines

render

when

handling

objects

in

memory

aka

\Scripting

Engine

Memory

Corruption

Vulnerability\.

This

CVE

ID

is

unique

from

and


Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft Edge accesses objects in memory aka \Microsoft Edge Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8731 CVE-2017-8734 and CVE-2017-11766.


Microsoft Edge in Microsoft Windows 10 1511 1607 and 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8596 CVE-2017-8618 CVE-2017-8619 CVE-2017-8601 CVE-2017-8610 CVE-2017-8603 CVE-2017-8598 CVE-2017-8601 CVE-2017-8605 CVE-2017-8606 CVE-2017-8607 CVE-2017-8608 and CVE-2017-8609.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Internet Explorer accesses objects in memory aka \Internet Explorer Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8747.


Microsoft Edge in Microsoft Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8634 CVE-2017-8635 CVE-2017-8636 CVE-2017-8638 CVE-2017-8639 CVE-2017-8640 CVE-2017-8641 CVE-2017-8645 CVE-2017-8646 CVE-2017-8647 CVE-2017-8655 CVE-2017-8656 CVE-2017-8670 CVE-2017-8671 CVE-2017-8672 and CVE-2017-8674.


Microsoft Edge in Microsoft Windows 10 1511 1607 1703 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that the scripting engine handles objects in memory in Microsoft Edge aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8649 CVE-2017-8649 CVE-2017-8660 CVE-2017-8729 CVE-2017-8738 CVE-2017-8740 CVE-2017-8741 CVE-2017-8748 CVE-2017-8752 CVE-2017-8753 CVE-2017-8756 and CVE-2017-11764.


Microsoft browsers in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user due to Microsoft browsers improperly accessing objects in memory aka \Microsoft Browser Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2017-8669.


Microsoft Excel 2010 SP2 Excel 2013 SP1 Excel 2013 RT SP1 Excel 2016 Excel for Mac 2011 Excel 2016 for Mac and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel 2007 SP3 Excel 2010 SP2 Excel for Mac 2011 Excel 2016 for Mac Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 Word 2013 SP1 Word 2013 RT SP1 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


The

Windows

font

library

in

Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Gold

and

Office

Office

Word

Viewer;

.NET

Framework

and

Skype

for

Business

Lync

Lync

Live

Meeting

Console;

and

Silverlight

allows

remote

attackers

to

execute

arbitrary

code

via

a

crafted

embedded

font

aka

\Graphics

Memory

Corruption

Vulnerability.\


Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 Word 2013 SP1 Word 2013 RT SP1 Word 2016 and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


The Windows font library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 Office 2007 SP3 Office 2010 SP2 Word Viewer Skype for Business 2016 Lync 2010 Lync 2013 SP1 and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font aka \Graphics Memory Corruption Vulnerability.\


Microsoft Office 2007 SP3 Office 2010 SP2 Office 2013 SP1 Office 2013 RT SP1 Office 2016 Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1 Office Web Apps 2010 SP2 and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


The Windows font library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 Windows 10 Gold and 1511 Office 2007 SP3 Office 2010 SP2 Word Viewer Skype for Business 2016 Lync 2010 Lync 2013 SP1 and Live Meeting 2007 Console allows remote attackers to execute arbitrary code via a crafted embedded font aka \Graphics Memory Corruption Vulnerability.\


The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines as used in Internet Explorer 8 through 11 and other products allow remote attackers to execute arbitrary code via a crafted web site aka \Scripting Engine Memory Corruption Vulnerability.\


Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 Word 2013 SP1 Word 2013 RT SP1 Word 2016 Office Compatibility Pack SP3 and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel 2007 SP3 Excel 2010 SP2 Excel 2013 SP1 Excel 2013 RT SP1 Excel 2016 Excel for Mac 2011 Excel 2016 for Mac Office Compatibility Pack SP3 Excel Viewer and Excel Services on SharePoint Server 2007 SP3 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft

Office

Excel

PowerPoint

Word

Office

Excel

PowerPoint

Word

Office

RT

Excel

RT

PowerPoint

RT

Word

RT

Office

for

Mac

Excel

for

Mac

PowerPoint

for

Mac

Word

for

Mac

PowerPoint

Viewer

Word

Automation

Services

on

SharePoint

Server

and

Excel

Services

on

SharePoint

Server

and

Office

Web

Apps

Excel

Web

App

Office

Web

Apps

Server

SharePoint

Foundation

and

SharePoint

Server

allow

remote

attackers

to

execute

arbitrary

code

via

a

crafted

document

aka

\Microsoft

Office

Memory

Corruption

Vulnerability.\


Microsoft Office Compatibility Pack SP3 Office 2010 SP2 Office 2013 SP1 and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 Word 2013 SP1 Word 2013 RT SP1 Word for Mac 2011 Office Compatibility Pack SP3 Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1 and Office Web Apps Server 2010 SP2 and 2013 SP1 allow remote attackers to execute arbitrary code via a crafted RTF document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 Word 2013 SP1 Word 2013 RT SP1 Office for Mac 2011 Office for Mac 2016 Office Compatibility Pack SP3 Word Viewer Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1 Word Web Apps 2010 SP2 and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Word 2007 SP3 Office 2010 SP2 Word 2010 SP2 and Office for Mac 2011 allow remote attackers to execute arbitrary code via a crafted document aka \Microsoft Office Memory Corruption Vulnerability.\


Use-after-free vulnerability in Microsoft Excel 2007 SP3 Excel 2010 SP2 Excel 2013 SP1 Excel 2013 RT SP1 Excel 2016 Excel for Mac 2011 Excel 2016 for Mac Excel Viewer Office Compatibility Pack SP3 and Excel Services on SharePoint Server 2007 SP3 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary code via a long fileVersion element in an Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Excel 2007 SP3 Excel 2010 SP2 Excel 2013 SP1 Excel 2013 RT SP1 Excel for Mac 2011 and 2016 Office Compatibility Pack SP3 and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Use-after-free vulnerability in Microsoft Excel 2010 SP2 Excel 2013 SP1 Excel 2013 RT SP1 Excel 2016 Excel for Mac 2011 Excel 2016 for Mac and Excel Services on SharePoint Server 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted calculatedColumnFormula object in an Office document aka \Microsoft Office Memory Corruption Vulnerability.\


Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations which allows user-assisted remote attackers to execute arbitrary code via a crafted HTML file that leads to memory corruption aka \HTML Rendering Memory Corruption Vulnerability.\


Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions such as normalize and \incorrectly created elements\ that trigger memory corruption aka \DHTML Script Function Memory Corruption Vulnerability.\


Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously which results in the access of previously freed memory aka \Script Error Handling Memory Corruption Vulnerability.\


Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption aka \HTML Rendering Memory Corruption Vulnerability.\


Microsoft Excel 2003 SP3 2007 SP2 and SP3 and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files which allows remote attackers to execute arbitrary code via a crafted spreadsheet aka \Excel SXLI Record Memory Corruption Vulnerability.\


Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file aka \VSD File Format Memory Corruption Vulnerability \ a different vulnerability than CVE-2012-0019 CVE-2012-0136 CVE-2012-0137 and CVE-2012-0138.


Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file aka \VSD File Format Memory Corruption Vulnerability \ a different vulnerability than CVE-2012-0020 CVE-2012-0136 CVE-2012-0137 and CVE-2012-0138.


Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file aka \VSD File Format Memory Corruption Vulnerability \ a different vulnerability than CVE-2012-0019 CVE-2012-0020 CVE-2012-0137 and CVE-2012-0138.


Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file aka \VSD File Format Memory Corruption Vulnerability \ a different vulnerability than CVE-2012-0019 CVE-2012-0020 CVE-2012-0136 and CVE-2012-0138.


Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files which allows remote attackers to execute arbitrary code via a crafted file aka \VSD File Format Memory Corruption Vulnerability.\


Microsoft Excel 2003 SP3 2007 SP2 and SP3 and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files which allows remote attackers to execute arbitrary code via a crafted spreadsheet aka \Excel File Format Memory Corruption Vulnerability.\


Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file aka \VSD File Format Memory Corruption Vulnerability \ a different vulnerability than CVE-2012-0019 CVE-2012-0020 CVE-2012-0136 and CVE-2012-0137.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 and Internet Explorer and Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0772 CVE-2018-0773 CVE-2018-0774 CVE-2018-0775 CVE-2018-0776 CVE-2018-0777 CVE-2018-0778 and CVE-2018-0781.


Internet Explorer in Microsoft Windows 7 SP1 Windows Server 2008 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 and Internet Explorer and Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0762 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0773 CVE-2018-0774 CVE-2018-0775 CVE-2018-0776 CVE-2018-0777 CVE-2018-0778 and CVE-2018-0781.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0762 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0772 CVE-2018-0773 CVE-2018-0774 CVE-2018-0775 CVE-2018-0777 CVE-2018-0778 and CVE-2018-0781.


Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0762 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0772 CVE-2018-0774 CVE-2018-0775 CVE-2018-0776 CVE-2018-0777 CVE-2018-0778 and CVE-2018-0781.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0762 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0772 CVE-2018-0773 CVE-2018-0774 CVE-2018-0775 CVE-2018-0776 CVE-2018-0778 and CVE-2018-0781.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0762 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0772 CVE-2018-0773 CVE-2018-0774 CVE-2018-0775 CVE-2018-0776 CVE-2018-0777 CVE-2018-0778 and CVE-2018-0781.


Microsoft Edge in Windows 10 Gold 1511 1607 1703 1709 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0762 CVE-2018-0768 CVE-2018-0770 CVE-2018-0772 CVE-2018-0773 CVE-2018-0774 CVE-2018-0775 CVE-2018-0776 CVE-2018-0777 CVE-2018-0778 and CVE-2018-0781.


Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0762 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0772 CVE-2018-0773 CVE-2018-0774 CVE-2018-0776 CVE-2018-0777 CVE-2018-0778 and CVE-2018-0781.


Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory aka \Scripting Engine Memory Corruption Vulnerability\. This CVE ID is unique from CVE-2018-0758 CVE-2018-0762 CVE-2018-0768 CVE-2018-0769 CVE-2018-0770 CVE-2018-0772 CVE-2018-0773 CVE-2018-0774 CVE-2018-0775 CVE-2018-0776 CVE-2018-0777 and CVE-2018-0781.