PT-2015-1598 · Microsoft · Internet Explorer
Thomas Vanhoutte
·
Publicado
2015-06-09
·
Atualizado
2018-10-12
·
CVE-2015-1739
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 10 through 11
Description
The issue is related to insufficient access restrictions to certain functions in Internet Explorer, allowing a remote attacker to gain elevated privileges via a crafted web site. This vulnerability can be exploited by running script with elevated privileges under specific conditions, although it does not allow arbitrary code execution on its own. However, it could be used in conjunction with another vulnerability, such as a remote code execution vulnerability, to take advantage of the elevated privileges.
Recommendations
For versions 10 and 11, consider restricting access to sensitive functions until a patch is available.
As a temporary workaround, consider disabling the execution of scripts with elevated privileges in Internet Explorer until a fix is provided.
Restrict the use of Internet Explorer for accessing untrusted web sites to minimize the risk of exploitation.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Internet Explorer