PT-2015-1661 · Microsoft · Internet Explorer

Published 2015-07-14 · Updated 2018-10-12 · CVE-2015-2414

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 11

Description The issue is related to the improper handling of cached image information, which could allow a remote attacker to obtain sensitive browsing-history information. This could be used to gain access to information about the user's browsing history, potentially leading to further system compromise. The exploitation of this issue does not allow an attacker to execute code or elevate their user rights directly.

Recommendations For Internet Explorer versions 8 through 11, update to a version that properly handles cached image information to prevent information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-11007

CVE-2015-2414

Affected Products

Internet Explorer

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2015-2414 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11007 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2414 · Security Note
• http://technet.microsoft.com/security/bulletin/ms15-065 · Note
• http://technet.microsoft.com/security/bulletin/MS15-065 · Note
• http://securitytracker.com/id/1032894 · Note