Multiple vulnerabilities in Microsoft Internet Explorer

Описание

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Improper memory objects access can be exploited remotely via a specially designed web site to execute arbitrary code;
2. Improper memory objects handling at script engines can be exploited remotely via a specially designed web site to execute arbitrary code;
3. Improper permissions validation can be exploited remotely via a specially designed web site to gain privileges;
4. Improper memory disclosure can be exploited remotely to obtaib sensitive information;
5. Lack of ASLR restrictions at script engines can be exploited remotely to obtain sensitive information;
6. Improper memory content disclosure at script engine can be exploited remotely via a specially designed web site to obtain sensitive information.

Первичный источник обнаружения

• CVE-2015-2482
  CVE-2015-6055
  CVE-2015-6059
  CVE-2015-6052
  CVE-2015-6044
  CVE-2015-6047
  CVE-2015-6056
  CVE-2015-6053
  CVE-2015-6050
  CVE-2015-6051
  CVE-2015-6048
  CVE-2015-6049
  CVE-2015-6046
  CVE-2015-6042
  

Эксплуатация

The following public exploits exists for this vulnerability:

https://www.exploit-db.com/exploits/40798

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-Internet-Explorer

Список CVE

• CVE-2015-2482
  critical
• CVE-2015-6055
  critical
• CVE-2015-6059
  warning
• CVE-2015-6052
  warning
• CVE-2015-6044
  high
• CVE-2015-6047
  high
• CVE-2015-6056
  critical
• CVE-2015-6053
  critical
• CVE-2015-6050
  critical
• CVE-2015-6051
  warning
• CVE-2015-6048
  critical
• CVE-2015-6049
  critical
• CVE-2015-6046
  warning
• CVE-2015-6042
  critical

Список KB

• 3097617
• 3094995
• 3094996
• 3093983
• 3096441

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com