Amol Naik

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by improper access to objects in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user.

The issue is related to a use-after-free error when accessing a CGeneratedTreeNode object, allowing remote attackers to execute arbitrary code or cause a denial of service via a specially crafted website. This vulnerability could corrupt memory, enabling an attacker to execute code in the context of the current user.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. It is related to the function CFormatCache<CSvgFormat>::AddRefData(), which lacks proper user input validation. This could lead to memory corruption, enabling an attacker to execute arbitrary code in the context of the current user. The vulnerability exists because Internet Explorer improperly accesses objects in memory.

The issue is related to incorrect access to objects in memory, which can cause memory errors and allow an attacker to execute arbitrary code in the context of the current user.

A memory corruption issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This is due to improper access to objects in memory, which could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user.

The issue is related to memory handling errors, allowing an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory. This could lead to memory corruption, enabling the attacker to execute code.

The issue is related to a use-after-free remote code execution problem.

The issue is related to a use-after-free remote code execution problem.

The issue is related to a type confusion remote code execution problem.

The issue concerns improper access restriction in comments.php, allowing remote attackers to modify or delete comments using specific actions, such as the `edit` or `del` action.

A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the `cname` (Name) or `email` parameters in comments.php.