PT-2015-1599 · Microsoft · Internet Explorer
Thomas Vanhoutte
·
Published
2015-06-09
·
Updated
2024-02-15
·
CVE-2015-1743
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Internet Explorer versions 7 through 11
Description
The issue is related to insufficient access restrictions to certain functions in Internet Explorer, allowing a remote attacker to elevate their privileges via a specially crafted website. This can occur when Internet Explorer does not properly validate permissions under specific conditions, potentially allowing script to be run with elevated privileges. These issues by themselves do not allow arbitrary code to be run but could be used in conjunction with another vulnerability, such as a remote code execution vulnerability, to take advantage of the elevated privileges when running arbitrary code.
Recommendations
For Internet Explorer versions 7 through 11, consider restricting access to potentially vulnerable functions or modules until a patch is available. As a temporary workaround, disabling the execution of scripts with elevated privileges may help minimize the risk of exploitation. However, specific steps for mitigation are not provided, and thus, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Internet Explorer