PT-2019-1504 · Microsoft · Internet Explorer

Publicado 2019-02-12 · Atualizado 2025-10-29 · CVE-2019-0676

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified)

Description An information disclosure issue exists due to improper handling of objects in memory by Internet Explorer. This could allow an attacker to test for the presence of files on disk. Successful exploitation requires persuading a user to open a malicious website, potentially allowing a remote attacker to access protected information using a specially crafted web page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

BDU:2019-00946

CVE-2019-0676

Produtos afetados

Internet Explorer

Referências · 10

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0676 · Aviso do Fabricante
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0676 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-0676 · Nota de Segurança
• http://securityfocus.com/bid/106886 · Nota
• https://t.me/cveNotify/140814 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-0676 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00946 · Nota de Segurança
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Nota
• https://t.me/cvenotify/118617 · Publicação no Telegram
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0676 · Nota de Segurança