Peter Corelanc0D3R Van Eeckhoutte

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to the improper handling of objects in memory by Internet Explorer, which could lead to memory corruption and allow an attacker to execute arbitrary code in the context of the current user. This can be achieved through a specially crafted website. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to memory handling errors, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service by accessing a specially crafted website. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 7 through 11 **Description** The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service. It is caused by improper access to objects in memory, which can be exploited by attackers using a crafted web site. The vulnerability is also described as a use-after-free error when working with a CTreeNode object, enabling remote execution of arbitrary code. **Recommendations** For Microsoft Internet Explorer versions 7 through 11, update to a version that includes the fix for this memory corruption issue to prevent exploitation. As a temporary workaround, consider restricting access to potentially malicious web sites to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to improper memory object access, which could lead to memory corruption. This allows an attacker to potentially execute arbitrary code in the context of the current user by exploiting the vulnerability through a specially crafted website. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions 9 through 11 **Description** The issue is related to memory handling errors, allowing an attacker to execute arbitrary code or cause a denial of service via a specially crafted website. This is due to incorrect access to objects in memory in the context of the current user. The vulnerability was demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014. **Recommendations** For Internet Explorer versions 9 through 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.