Jose A. Vazquez

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 11 **Description** The issue is caused by a memory buffer overflow, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. This can lead to memory corruption. **Recommendations** For Microsoft Internet Explorer version 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to memory handling errors, allowing an attacker to remotely execute arbitrary code in the context of the current user. This can be achieved by exploiting the improper access to objects in memory, which could lead to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is related to memory handling errors, allowing an attacker to execute arbitrary code or cause a denial of service using a specially crafted website. This is due to improper access to objects in memory in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 8 through 9 **Description** A remote code execution issue exists due to improper memory object access, potentially leading to memory corruption and allowing an attacker to execute arbitrary code in the context of the current user. This can be triggered via a crafted web site. **Recommendations** For Microsoft Internet Explorer versions 8 and 9, update to a newer version to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 9 through 10 **Description** A remote code execution issue exists due to improper memory object access, potentially leading to memory corruption. This could allow an attacker to execute arbitrary code in the context of the current user by visiting a crafted web site. **Recommendations** For Microsoft Internet Explorer versions 9 and 10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** A remote code execution issue exists due to improper memory object access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the current user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer (affected versions not specified) **Description** A remote code execution issue exists due to improper memory access by Internet Explorer, potentially allowing an attacker to execute arbitrary code in the context of the current user. This occurs when the browser improperly accesses an object in memory, which could lead to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 9 **Description** A use-after-free issue allows remote attackers to execute arbitrary code via a crafted web site. This occurs due to incorrect access to an object that has not been correctly initialized or has been deleted, potentially corrupting memory and enabling arbitrary code execution in the context of the current user. **Recommendations** For Microsoft Internet Explorer version 9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 9 **Description** A use-after-free issue allows remote attackers to execute arbitrary code via a crafted web site. This occurs due to incorrect access to an object that has not been correctly initialized or has been deleted, potentially corrupting memory and enabling an attacker to execute arbitrary code in the context of the current user. **Recommendations** For Microsoft Internet Explorer version 9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 6.0 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple Safari versions prior to 6.0, update to version 6.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer version 9 **Description** A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing a deleted object, potentially corrupting memory. The issue may enable an attacker to execute arbitrary code in the context of the current user. **Recommendations** For Microsoft Internet Explorer version 9, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 6.0 Apple iTunes (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple Safari versions prior to 6.0, update to version 6.0 or later to resolve the issue. For Apple iTunes, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 18.0.1025.168 Apple Safari versions prior to 6.0 **Description** The issue is related to a use-after-free vulnerability in the XML parser and a memory corruption issue in WebKit, allowing remote attackers to cause a denial of service or possibly execute arbitrary code via crafted web sites. **Recommendations** For Google Chrome versions prior to 18.0.1025.168, update to version 18.0.1025.168 or later to resolve the issue. For Apple Safari versions prior to 6.0, update to version 6.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 5.0.6 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. **Recommendations** For Apple Safari versions prior to 5.0.6, update to version 5.0.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Opera versions prior to 11.11 **Description** The issue is related to the improper implementation of FRAMESET elements, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can occur through vectors related to page unload. **Recommendations** For Opera versions prior to 11.11, update to version 11.11 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 11.0.696.57 **Description** A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This issue is related to the ruby element and Cascading Style Sheets (CSS) token sequences. **Recommendations** For versions prior to 11.0.696.57, update to version 11.0.696.57 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iTunes versions prior to 10.2 Apple Safari (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in the Runin box functionality within the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit. This vulnerability can be exploited by man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash. The exploitation vectors are related to iTunes Store browsing. **Recommendations** For Apple iTunes versions prior to 10.2, update to version 10.2 or later to resolve the issue. For Apple Safari, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 4.1 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors involving HTML object outlines. **Recommendations** For Apple iOS versions prior to 4.1, update to version 4.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 5.0.375.99 **Description** The issue allows remote attackers to cause a denial of service, resulting in an application crash, by providing an invalid image. **Recommendations** For versions prior to 5.0.375.99, update to version 5.0.375.99 or later to resolve the issue.