PT-2018-9167 · Microsoft · Internet Explorer

Masato Kinugawa · Published 2018-07-10 · Updated 2019-10-03 · CVE-2018-0949

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 9 through 11

Description: A security feature bypass issue exists due to Microsoft Internet Explorer's improper handling of requests involving UNC resources. This could allow an attacker to force the browser to load restricted data.

Recommendations: For versions 9 through 11, update to a version that properly handles UNC resource requests to prevent the security feature bypass.

Fix

Related Identifiers

CVE-2018-0949

Affected Products

Internet Explorer

References · 6

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0949 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0949 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0949 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0949 · Security Note
• http://securitytracker.com/id/1041258 · Note
• http://securityfocus.com/bid/104622 · Note