CVE-2015-2425

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

History

21 Nov 2024, 02:27

Type Values Removed Values Added
References () http://www.securitytracker.com/id/1032894 - Broken Link, Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1032894 - Broken Link, Third Party Advisory, VDB Entry
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 - Patch, Vendor Advisory () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 - Patch, Vendor Advisory

28 Jun 2024, 17:22

Type Values Removed Values Added
References () http://www.securitytracker.com/id/1032894 - () http://www.securitytracker.com/id/1032894 - Broken Link, Third Party Advisory, VDB Entry
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 - Patch, Vendor Advisory
CPE cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
CWE CWE-119 CWE-787
CVSS v2 : 9.3
v3 : unknown
v2 : 9.3
v3 : 8.8
First Time Microsoft windows Server 2012
Microsoft windows Server 2008
Microsoft windows Rt 8.1
Microsoft windows 7
Microsoft windows 8.1

Information

Published : 2015-07-14 21:59

Updated : 2024-11-21 02:27


NVD link : CVE-2015-2425

Mitre link : CVE-2015-2425

CVE.ORG link : CVE-2015-2425


JSON object : View

Products Affected

microsoft

  • windows_server_2008
  • windows_rt_8.1
  • windows_server_2012
  • windows_8.1
  • internet_explorer
  • windows_7
CWE
CWE-787

Out-of-bounds Write