PT-2018-9783 · Microsoft · Edge+2

Publicado 2018-05-08 · Atualizado 2020-08-24 · CVE-2018-1025

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Internet Explorer 11 Microsoft Edge

Description: An information disclosure issue exists due to improper handling of objects in memory by affected Microsoft browsers. This could allow an attacker to obtain information, potentially further compromising the user's system.

Recommendations: For Internet Explorer 11, update to a version that properly handles objects in memory to prevent information disclosure. For Microsoft Edge, apply the necessary patches or updates to fix the improper handling of objects in memory.

Correção

Identificadores relacionados

CVE-2018-1025

ZDI-18-434

ZDI-18-612

Produtos afetados

Edge

Internet Explorer

Internet Explorer 11

Referências · 8

• http://securitytracker.com/id/1040844 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1025 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1025 · Aviso do Fabricante
• http://securityfocus.com/bid/103984 · Nota
• https://zerodayinitiative.com/advisories/ZDI-18-434 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1025 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1025 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-18-612 · Nota de Segurança