Multiple vulnerabilities in Microsoft Internet Explorer

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Improper memory objects access can be exploited remotely via a specially designed web content to execute arbitrary code
2. Improper memory handling at VBScript and JScript engines can be exploited remotely via a specially designed web content or ActiveX control to execute arbitrary code;
3. Improper memory content disclosure can be exploited remotely via a specially designed web content to obtain sensitive information;
4. Improper Address Space Layout Randomization can be exploited remotely via a specially designed web content to bypass security restrictions.

---

Technical details

To mitigate vulnerability (2) access to VBScript.dll and JScript.dll can be restricted. For further details look at original advisory.

Ursprüngliche Informationshinweise

• CVE-2015-6064

• CVE-2015-6078
• CVE-2015-6088
• CVE-2015-6073
• CVE-2015-6087
• CVE-2015-6066
• CVE-2015-6068
• CVE-2015-6065
• CVE-2015-6071
• CVE-2015-6072
• CVE-2015-6069
• CVE-2015-6070
• CVE-2015-6074
• CVE-2015-6086
• CVE-2015-6077
• CVE-2015-6082
• CVE-2015-6081
• CVE-2015-6080
• CVE-2015-6079
• CVE-2015-6076
• CVE-2015-6075
• CVE-2015-2427
• CVE-2015-6089
• CVE-2015-6085
• CVE-2015-6084

CVE Liste

• CVE-2015-6064
  high
• CVE-2015-6078
  high
• CVE-2015-6088
  high
• CVE-2015-6073
  high
• CVE-2015-6087
  high
• CVE-2015-6066
  high
• CVE-2015-6068
  high
• CVE-2015-6065
  high
• CVE-2015-6071
  high
• CVE-2015-6072
  high
• CVE-2015-6069
  high
• CVE-2015-6070
  high
• CVE-2015-6074
  high
• CVE-2015-6086
  high
• CVE-2015-6077
  high
• CVE-2015-6082
  high
• CVE-2015-6081
  high
• CVE-2015-6080
  high
• CVE-2015-6079
  high
• CVE-2015-6076
  high
• CVE-2015-6075
  high
• CVE-2015-2427
  high
• CVE-2015-6089
  high
• CVE-2015-6085
  high
• CVE-2015-6084
  high

KB Liste

• 3105211
• 3105213
• 3104517
• 3100773

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com