PT-2018-2067 · Microsoft · Internet Explorer
Clement Lecigne
·
Publicado
2018-12-19
·
Atualizado
2025-10-29
·
CVE-2018-8653
CVSS v2.0
7.6
Alta
| Vetor | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Internet Explorer versions 9 through 11
Description
The issue is caused by a memory corruption vulnerability in the scripting engine of Internet Explorer, allowing a remote attacker to execute arbitrary code with the help of a specially crafted web page. This could lead to the corruption of memory, enabling an attacker to execute code in the context of the current user. If the current user has administrative rights, the attacker could gain control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations
For Internet Explorer versions 9 through 11, update to a newer version that contains a fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Internet Explorer