Kaspersky Threats

KLA10579
Multiple vulnerabilities in Microsoft Internet Explorer

Updated: 11/15/2018

CVSS ?	9.3
Detect date ?	05/12/2015
Severity ?	Critical
Description	Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities Improper ASLR handling can be exploited remotely via a specially designed web site; An improper permissions validation can be exploited remotely via a specially designed web site; An improper access restrictions can be exploited remotely via a specially designed web page; Improper memory handling can be exploited remotely via a specially designed web page.
Affected products	Microsoft Internet Explorer versions from 6 to 11
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	Microsoft advisory CVE-2015-1686 CVE-2015-1684 CVE-2015-1703 CVE-2015-1706 CVE-2015-1705 CVE-2015-1704 CVE-2015-1709 CVE-2015-1708 CVE-2015-1685 CVE-2015-1688 CVE-2015-1689 CVE-2015-1718 CVE-2015-1714 CVE-2015-1717 CVE-2015-1710 CVE-2015-1711 CVE-2015-1712 CVE-2015-1713 CVE-2015-1658 CVE-2015-1691 CVE-2015-1692 CVE-2015-1694
Impacts ?	ACE [?] OSI [?] DoS [?] SB [?] PE [?]
Related products	Microsoft Internet Explorer
CVE-IDS ?	CVE-2015-1686 CVE-2015-1684 CVE-2015-1703 CVE-2015-1706 CVE-2015-1705 CVE-2015-1704 CVE-2015-1709 CVE-2015-1708 CVE-2015-1685 CVE-2015-1688 CVE-2015-1689 CVE-2015-1718 CVE-2015-1714 CVE-2015-1717 CVE-2015-1710 CVE-2015-1711 CVE-2015-1712 CVE-2015-1713 CVE-2015-1658 CVE-2015-1691 CVE-2015-1692 CVE-2015-1694
Microsoft official advisories	Microsoft Security Update Guide
KB list	3050941 3049563 3050946 3050945