First published: Tue Jul 14 2015(Updated: )
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.
Credit: secure@microsoft.com secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | ||
Internet Explorer | =11 | |
All of | ||
Internet Explorer | =11 | |
Any of | ||
Microsoft Windows 7 | =sp1 | |
Microsoft Windows 8.1 | ||
Microsoft Windows RT | ||
Microsoft Windows Server 2008 Itanium | =r2-sp1 | |
Microsoft Windows Server 2012 x64 | =r2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-2425 has a critical severity rating due to its potential to allow remote code execution.
To fix CVE-2015-2425, apply the latest security updates provided by Microsoft for Internet Explorer 11.
Internet Explorer 11 is the only version affected by CVE-2015-2425.
Yes, CVE-2015-2425 can lead to denial of service due to memory corruption.
CVE-2015-2425 affects Internet Explorer 11 running on various versions of Windows including Windows 7 SP1 and Windows Server 2012 R2.