CVE-2015-2502 | BDVDB-2026-71201 Detail
MicrosoftInternet Explorer
Description#
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
- http://www.securitytracker.com/id/1033317
- http://twitter.com/Laughing_Mantis/statuses/633839231840841728
- http://www.securityfocus.com/bid/76403
- http://www.securityweek.com/microsoft-issues-emergency-patch-critical-ie-flaw-exploited-wild
- http://twitter.com/Laughing_Mantis/statuses/633839771865886721
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-093
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-2502
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.