CVE-2015-2404: Buffer Overflow

Published Jul 14, 2015

Updated

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2397, CVE-2015-2406, and CVE-2015-2422.

Affected Software

6 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Jul 14, 2015

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2404?

CVE-2015-2404 has a critical severity rating due to its potential to allow remote code execution.

How do I fix CVE-2015-2404?

To fix CVE-2015-2404, update Microsoft Internet Explorer to the latest version provided in the security updates.

What versions of Internet Explorer are affected by CVE-2015-2404?

CVE-2015-2404 affects Internet Explorer versions 6 through 11.

What type of attack does CVE-2015-2404 enable?

CVE-2015-2404 enables remote attackers to execute arbitrary code or cause a denial of service through memory corruption.

Is CVE-2015-2404 exploitable through a web page?

Yes, CVE-2015-2404 can be exploited through a specially crafted web page.