PT-2020-3762 · Microsoft · Internet Explorer
Published
2020-08-11
·
Updated
2026-02-23
·
CVE-2020-1380
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Internet Explorer (affected versions not specified)
Description:
A remote code execution issue exists due to the way the scripting engine handles objects in memory in Internet Explorer. This could allow an attacker to execute arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. In a web-based attack scenario, an attacker could host a specially crafted website to exploit the vulnerability through Internet Explorer or embed an ActiveX control in an application or Microsoft Office document. The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Internet Explorer