PT-2018-9783 · Microsoft · Edge+2

Published 2018-05-08 · Updated 2020-08-24 · CVE-2018-1025

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Internet Explorer 11 Microsoft Edge

Description: An information disclosure issue exists due to improper handling of objects in memory by affected Microsoft browsers. This could allow an attacker to obtain information, potentially further compromising the user's system.

Recommendations: For Internet Explorer 11, update to a version that properly handles objects in memory to prevent information disclosure. For Microsoft Edge, apply the necessary patches or updates to fix the improper handling of objects in memory.

Fix

Related Identifiers

CVE-2018-1025

ZDI-18-434

ZDI-18-612

Affected Products

Edge

Internet Explorer

Internet Explorer 11

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2018-1025 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1025 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-434 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1025 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1025 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-612 · Security Note
• http://securitytracker.com/id/1040844 · Note
• http://securityfocus.com/bid/103984 · Note