| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| MS15-079 | Cumulative Security Update for Internet Explorer (3082442) | Internet Explorer | Critical | 12-08-2015 |
Technical Information
Brief overview of the risk:
This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user.
Detailed Information on the risk:
Remote code execution vulnerabilities exist when Internet Explorer improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
An attacker could host a specially crafted website that is designed to exploit these vulnerabilities through Internet Explorer, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit these vulnerabilities.
Internet Explorer 7An attacker could host a specially crafted website that is designed to exploit these vulnerabilities through Internet Explorer, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit these vulnerabilities.
Further information on this exploit is available at : MS15-079
Internet Explorer 8
Internet Explorer 9
Internet Explorer 10
Internet Explorer 11
Affected Software
Internet Explorer 7Internet Explorer 8
Internet Explorer 9
Internet Explorer 10
Internet Explorer 11