CVE-2015-2397: Buffer Overflow

Published Jul 14, 2015

Updated

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2404, CVE-2015-2406, and CVE-2015-2422.

Affected Software

6 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Jul 14, 2015

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2397?

CVE-2015-2397 is rated as critical due to its potential for remote code execution and denial of service through memory corruption.

How do I fix CVE-2015-2397?

To fix CVE-2015-2397, it is essential to apply the latest security updates provided by Microsoft for Internet Explorer.

Which versions of Internet Explorer are affected by CVE-2015-2397?

CVE-2015-2397 affects Internet Explorer versions 6 through 11.

What type of vulnerability is CVE-2015-2397?

CVE-2015-2397 is classified as a memory corruption vulnerability that can be exploited by remote attackers.

Can CVE-2015-2397 lead to a denial of service?

Yes, CVE-2015-2397 can cause a denial of service along with allowing remote attackers to execute arbitrary code.