CVE-2015-6152

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6162.
References
Link Resource
http://www.securitytracker.com/id/1034315 Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-124 Patch Vendor Advisory
https://www.exploit-db.com/exploits/38972/ Exploit Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-12-09 11:59

Updated : 2024-02-28 15:21


NVD link : CVE-2015-6152

Mitre link : CVE-2015-6152

CVE.ORG link : CVE-2015-6152


JSON object : View

Products Affected

microsoft

  • internet_explorer
  • windows_7
  • windows_rt
  • windows_server_2012
  • windows_server_2008
  • windows_8
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer