Code execution vulnerability in Internet Explorer

Описание

Multiple critical vulnerabilities have been found in Internet Explorer. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information.

Below is a complete list of vulnerabilities

1. An unknwon vulnerabilities can be exploited remotely via a specially designed web site;
2. Use-after-free vulnerability can be exploited remotely via a specially edsigned HTML document.

Первичный источник обнаружения

• MS advisory
  CVE-2015-0043
  CVE-2015-0042
  CVE-2015-0041
  CVE-2015-0040
  CVE-2015-0048
  CVE-2015-0046
  CVE-2015-0045
  CVE-2015-0044
  CVE-2015-0017
  CVE-2015-0038
  CVE-2015-0029
  CVE-2015-0028
  CVE-2015-0050
  CVE-2015-0055
  CVE-2015-0070
  CVE-2015-0053
  CVE-2014-8967
  CVE-2015-0049
  CVE-2015-0051
  CVE-2015-0020
  CVE-2015-0021
  CVE-2015-0026
  CVE-2015-0027
  CVE-2015-0054
  CVE-2015-0025
  CVE-2015-0066
  CVE-2015-0067
  CVE-2015-0019
  CVE-2015-0018
  CVE-2015-0031
  CVE-2015-0030
  CVE-2015-0036
  CVE-2015-0039
  CVE-2015-0022
  CVE-2015-0023
  CVE-2015-0035
  CVE-2015-0052
  CVE-2015-0037
  CVE-2015-0068
  CVE-2015-0069
  CVE-2015-0071
  

Эксплуатация

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/40757

https://www.exploit-db.com/exploits/40841

Связанные продукты

• Microsoft-Internet-Explorer

Список CVE

• CVE-2015-0043
  critical
• CVE-2015-0042
  critical
• CVE-2015-0041
  critical
• CVE-2015-0040
  critical
• CVE-2015-0048
  critical
• CVE-2015-0046
  critical
• CVE-2015-0045
  critical
• CVE-2015-0044
  critical
• CVE-2015-0017
  critical
• CVE-2015-0038
  critical
• CVE-2015-0029
  critical
• CVE-2015-0028
  critical
• CVE-2015-0050
  critical
• CVE-2015-0055
  warning
• CVE-2015-0070
  warning
• CVE-2015-0053
  critical
• CVE-2014-8967
  high
• CVE-2015-0049
  critical
• CVE-2015-0051
  warning
• CVE-2015-0020
  critical
• CVE-2015-0021
  critical
• CVE-2015-0026
  critical
• CVE-2015-0027
  critical
• CVE-2015-0054
  warning
• CVE-2015-0025
  critical
• CVE-2015-0066
  critical
• CVE-2015-0067
  critical
• CVE-2015-0019
  critical
• CVE-2015-0018
  critical
• CVE-2015-0031
  critical
• CVE-2015-0030
  critical
• CVE-2015-0036
  critical
• CVE-2015-0039
  critical
• CVE-2015-0022
  critical
• CVE-2015-0023
  critical
• CVE-2015-0035
  critical
• CVE-2015-0052
  critical
• CVE-2015-0037
  critical
• CVE-2015-0068
  critical
• CVE-2015-0069
  warning
• CVE-2015-0071
  warning

Список KB

• 3034682
• 3034196
• 3021952

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com