PT-2015-1658 · Microsoft · Internet Explorer

Publicado 2015-07-14 · Atualizado 2018-10-12 · CVE-2015-2410

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 6 through 11

Description The issue is related to the improper handling of requests from external stylesheets, which could allow a remote attacker to determine the existence of specific local files using a crafted stylesheet. This could potentially be used to obtain information that could be used to further compromise the affected system. The attacker could not execute code or elevate user rights directly through this issue.

Recommendations For Internet Explorer versions 6 through 11, update to a version that properly handles requests from external stylesheets to prevent information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-11004

CVE-2015-2410

Produtos afetados

Internet Explorer

Referências · 7

• http://technet.microsoft.com/security/bulletin/MS15-065 · Nota
• https://bdu.fstec.ru/vul/2015-11004 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-2410 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/ms15-065 · Nota
• http://securitytracker.com/id/1032894 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2410 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 · Aviso do Fabricante