PT-2015-1660 · Microsoft · Internet Explorer

Publicado 2015-07-14 · Atualizado 2018-10-12 · CVE-2015-2413

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 6 through 11

Description The issue is related to the improper handling of requests for module resources, which could allow a remote attacker to determine the existence of specific local files using a specially crafted request. This could potentially be used to obtain information that could aid in further compromising the affected system. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Internet Explorer versions 6 through 11, update to a version that properly handles requests for module resources to prevent information disclosure. As a temporary workaround, consider restricting access to module resources to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-11006

CVE-2015-2413

Produtos afetados

Internet Explorer

Referências · 7

• https://bdu.fstec.ru/vul/2015-11006 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2413 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/ms15-065 · Nota
• http://technet.microsoft.com/security/bulletin/MS15-065 · Nota
• http://securitytracker.com/id/1032894 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-2413 · Nota de Segurança