CVSS: 9.3EPSS: 34%CPEs: 3EXPL: 0CVE-2015-2408 – Microsoft Internet Explorer CTitleElement Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2015-2408
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2401. Microsoft Internet Explorer en la versión 9 a la 11, permite a atacantes remotos la ejecución de código arbitrario o causar una denegación de servicio mediante la corrupción de la memoria a través de un sitio web específicamente diseñado para este fin, error conocido como 'Internet Explorer Memory Corruption Vulnerability,' una vulnerabilidad diferente a CVE-2015-1767 y CVE-2015-2401. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CTitleElement objects. By manipulating a document's elements, an attacker can force a dangling pointer to be reused after it has been freed. • http://www.securitytracker.com/id/1032894 http://www.zerodayinitiative.com/advisories/ZDI-15-458 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 87%CPEs: 3EXPL: 0CVE-2015-2401
https://notcve.org/view.php?id=CVE-2015-2401
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2408. Microsoft Internet Explorer de la versión 9 a la 11 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de una página web manipulada, también conocida como “Vulnerabilidad de corrupción de Memoria en Internet Explorer”, una vulnerabilidad diferente a CVE-2015-1767 y CVE-2015-2408. • http://www.securitytracker.com/id/1032894 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.3EPSS: 2%CPEs: 6EXPL: 0CVE-2015-2410
https://notcve.org/view.php?id=CVE-2015-2410
Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "Internet Explorer Information Disclosure Vulnerability." Desde la versión 6 a la versión 11 de Microsoft Internet Explorer se permite a atacantes remotos determinar la existencia de archivos locales mediante hojas de estilo manipuladas, también conocida como 'Vulnerabilidad de Revelación de informacion de Internet Explorer'. • http://www.securitytracker.com/id/1032894 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.3EPSS: 39%CPEs: 4EXPL: 0CVE-2015-2398
https://notcve.org/view.php?id=CVE-2015-2398
Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability." Microsoft Internet Explorer de la versión 8 a la 11 permite a atacantes remotos evadir el filtro XSS a través de un atributo modificado de un elemento en un documento HTML, también conocida como “Vulnerabilidad de Evasión de Filtro XSS en Internet Explorer.” • http://www.securitytracker.com/id/1032894 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.3EPSS: 56%CPEs: 3EXPL: 0CVE-2015-1767 – Microsoft Internet Explorer TreeWalker Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2015-1767
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2401 and CVE-2015-2408. Microsoft Internet Explorer versión 9 y anterior a la versión 11, permite a atacantes remotos ejecutar código de forma arbitraria o causar una denegación de servicio mediante la corrupción de memoria a través de un sitio web específicamente diseñado para este fin, error conocido como 'Internet Explorer Memory Corruption Vulnerability,' una vulnerabilidad diferente de la CVE-2015-2401 y CVE-2015-2408. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to TreeWalker objects. By manipulating a document's elements an attacker can force a CTreeNode object in memory to be reused after it has been freed. • http://www.securitytracker.com/id/1032894 http://www.zerodayinitiative.com/advisories/ZDI-15-568 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •