PT-2015-1661 · Microsoft · Internet Explorer

Publicado 2015-07-14 · Atualizado 2018-10-12 · CVE-2015-2414

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11

Description The issue is related to the improper handling of cached image information, which could allow a remote attacker to obtain sensitive browsing-history information. This could be used to gain access to information about the user's browsing history, potentially leading to further system compromise. The exploitation of this issue does not allow an attacker to execute code or elevate their user rights directly.

Recommendations For Internet Explorer versions 8 through 11, update to a version that properly handles cached image information to prevent information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-11007

CVE-2015-2414

Produtos afetados

Internet Explorer

Referências · 7

• http://technet.microsoft.com/security/bulletin/ms15-065 · Nota
• http://technet.microsoft.com/security/bulletin/MS15-065 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2414 · Nota de Segurança
• http://securitytracker.com/id/1032894 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11007 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2414 · Nota de Segurança