CVE-2013-4015: Medium severity Microsoft Internet Explorer vulnerability
Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mode or (2) Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4015?
CVE-2013-4015 has a severity rating that indicates a significant potential for privilege escalation due to a bypass in the elevation policy check.
How do I fix CVE-2013-4015?
To fix CVE-2013-4015, users should apply the latest security updates provided by Microsoft for Internet Explorer.
What versions of Internet Explorer are affected by CVE-2013-4015?
CVE-2013-4015 affects Internet Explorer versions 6 through 10.
What is the exploit mechanism of CVE-2013-4015?
The exploit mechanism of CVE-2013-4015 involves bypassing the elevation policy checks in Protected Mode and Enhanced Protected Mode.
Can local users exploit CVE-2013-4015 to gain privileges?
Yes, local users can exploit CVE-2013-4015 to bypass security mechanisms and gain elevated privileges.