// For flags

CVE-2015-2425

Microsoft Internet Explorer Memory Corruption Vulnerability

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

-
*SSVC
Descriptions

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.

Microsoft Internet Explorer 11 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de una página web manipulada, también conocida como “Vulnerabilidad de corrupción de Memoria en Internet Explorer”, una vulnerabilidad diferente a CVE-2015-2383 y a CVE-2015-2384.

Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2015-03-19 CVE Reserved
  • 2015-07-14 CVE Published
  • 2022-05-25 Exploited in Wild
  • 2022-06-15 KEV Due Date
  • 2024-06-29 EPSS Updated
  • 2024-08-06 CVE Updated
  • ---------- First Exploit
CWE
  • CWE-787: Out-of-bounds Write
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Microsoft
Search vendor "Microsoft"
 Internet Explorer
Search vendor "Microsoft" for product "Internet Explorer"
 11
Search vendor "Microsoft" for product "Internet Explorer" and version "11"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows 7
Search vendor "Microsoft" for product "Windows 7"
-sp1
Safe
Microsoft
Search vendor "Microsoft"
 Internet Explorer
Search vendor "Microsoft" for product "Internet Explorer"
 11
Search vendor "Microsoft" for product "Internet Explorer" and version "11"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows 8.1
Search vendor "Microsoft" for product "Windows 8.1"
--
Safe
Microsoft
Search vendor "Microsoft"
 Internet Explorer
Search vendor "Microsoft" for product "Internet Explorer"
 11
Search vendor "Microsoft" for product "Internet Explorer" and version "11"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows Rt 8.1
Search vendor "Microsoft" for product "Windows Rt 8.1"
--
Safe
Microsoft
Search vendor "Microsoft"
 Internet Explorer
Search vendor "Microsoft" for product "Internet Explorer"
 11
Search vendor "Microsoft" for product "Internet Explorer" and version "11"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows Server 2008
Search vendor "Microsoft" for product "Windows Server 2008"
 r2
Search vendor "Microsoft" for product "Windows Server 2008" and version "r2"
sp1, x64
Safe
Microsoft
Search vendor "Microsoft"
 Internet Explorer
Search vendor "Microsoft" for product "Internet Explorer"
 11
Search vendor "Microsoft" for product "Internet Explorer" and version "11"
-
Affected
in Microsoft
Search vendor "Microsoft"
 Windows Server 2012
Search vendor "Microsoft" for product "Windows Server 2012"
 r2
Search vendor "Microsoft" for product "Windows Server 2012" and version "r2"
-
Safe