OSVDB: Open Sourced Vulnerability Database

Creditee: Rosario Valotta

Known Contact Information:

None at this time

Known Affiliations:

None at this time

Disclosed Vulnerabilities (6):

Disc. Date	OSVDB ID	CVEID	Title
2012-12-11	88319	2012-4781	Microsoft IE InjectHTMLStream Object Handling Use-after-free Arbitrary Code Execution
2012-12-11	88318	2012-4782	Microsoft IE CMarkup Object Handling Use-after-free Arbitrary Code Execution
2012-09-21	85572	2012-2546	Microsoft IE Event Listener Unspecified Use-after-free Memory Corruption
2011-05-20	72724	2011-2382 2011-2383	Microsoft IE Cookie Jacking Account Authentication Bypass
2010-07-08	67119	2010-3213	Microsoft Outlook Web Access (OWA) Multiple Function CSRF
2006-02-28	23608		Microsoft IE Iframe Folder Delete Weakness

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.