Exploit

MS13-106: Farewell to another ASLR bypass

Monday, December 09, 2013

Today we released MS13-106 which resolves a security feature bypass that can allow attackers to circumvent Address Space Layout Randomization (ASLR) using a specific DLL library (HXDS.DLL) provided as part of Microsoft Office 2007 and 2010. The existence of an ASLR bypass does not directly enable the execution of code and does not represent a risk by itself, since

Read More

• ASLR
• Bypass
• Exploit
• HXDS.DLL
• MS13-106

CVE-2013-3906: a graphics vulnerability exploited through Word documents

Tuesday, November 05, 2013

Recently we become aware of a vulnerability of a Microsoft graphics component that is actively exploited in targeted attacks using crafted Word documents sent by email. Today we are releasing Security Advisory 2896666 which includes a proactive Fix it workaround for blocking this attack while we are working on the final update.

Read More

• 0day
• 2896666
• CVE-2013-3906
• EMET
• Exploit
• FixIt
• Office
• Zero-Day