CVE-2015-6069: Buffer Overflow

Published Nov 11, 2015

Updated

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6081.

Affected Software

4 affected components

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Nov 11, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6069?

CVE-2015-6069 has a critical severity rating due to the potential for remote code execution.

How do I fix CVE-2015-6069?

To fix CVE-2015-6069, apply the latest security updates provided by Microsoft for Internet Explorer versions 8 through 11.

What versions of Internet Explorer are affected by CVE-2015-6069?

CVE-2015-6069 affects Internet Explorer versions 8, 9, 10, and 11.

What type of attacks are possible with CVE-2015-6069?

CVE-2015-6069 allows attackers to execute arbitrary code or cause a denial of service through memory corruption.

Is there a workaround for CVE-2015-6069?

While there is no specific workaround, using an updated browser or disabling Active Scripting can mitigate risk until a patch is applied.