Hui Gao

A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code as the current user. If the user has administrative rights, the attacker could gain control of the system, enabling them to install programs, modify or delete data, or create new accounts with full rights.

An information disclosure issue exists due to the improper handling of objects in memory by the scripting engine in Microsoft browsers. This could allow an attacker to obtain information that could be used to further compromise the user's system.

The issue is related to how Internet Explorer handles objects in memory, allowing an attacker to gain the same user rights as the current user. This could lead to memory corruption, enabling an attacker to execute arbitrary code in the context of the current user. If the current user has administrative user rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to the way Internet Explorer accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user. This can be exploited by a remote attacker to corrupt memory and execute arbitrary code.

The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user.

The issue is related to incorrect access to objects in memory, which can cause memory errors and allow an attacker to execute arbitrary code in the context of the current user.

The issue is related to a use-after-free error when accessing the CDispStructureNode object, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.

The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user. This is a remote code execution issue.

The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This is due to improper access to objects in memory, which could corrupt memory and enable an attacker to execute arbitrary code in the context of the current user. The vulnerability is also associated with insufficient input validation.