CVE-2015-2494: Buffer Overflow

Published Sep 9, 2015

Updated

Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2492, CVE-2015-2498, and CVE-2015-2499.

Affected Software

6 affected components

Microsoft Edge

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Sep 9, 2015

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2494?

CVE-2015-2494 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2015-2494?

To fix CVE-2015-2494, users should ensure that their Microsoft Internet Explorer and Edge browsers are updated to the latest versions provided by Microsoft.

What platforms are affected by CVE-2015-2494?

CVE-2015-2494 affects Microsoft Internet Explorer versions 7 through 11 and Microsoft Edge.

Can CVE-2015-2494 cause a denial of service?

Yes, CVE-2015-2494 can cause a denial of service due to memory corruption vulnerabilities.

What types of attacks can be executed through CVE-2015-2494?

CVE-2015-2494 allows remote attackers to execute arbitrary code or execute a denial of service attack.