PT-2015-1757 · Microsoft · Internet Explorer
Publicado
2015-08-18
·
Atualizado
2025-03-26
·
CVE-2015-2502
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 7 through 11
Description
The issue is related to memory corruption and can be exploited by remote attackers via a crafted web site, potentially allowing them to execute arbitrary code or cause a denial of service. This issue has been exploited in the wild. The vulnerability is associated with improper access to objects in memory, which could lead to memory corruption and allow an attacker to execute arbitrary code in the context of the current user. If the current user has administrative user rights, an attacker could take complete control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Microsoft Internet Explorer versions 7 through 11, update to a version that includes the fix for this memory corruption issue to prevent remote code execution and denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
DoS
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Internet Explorer