CVE-2015-6070: Buffer Overflow

Published Nov 11, 2015

Updated

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6066, CVE-2015-6071, CVE-2015-6074, CVE-2015-6076, and CVE-2015-6087.

Affected Software

5 affected components

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Nov 11, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6070?

CVE-2015-6070 has a critical severity rating due to its potential to allow remote code execution.

How do I fix CVE-2015-6070?

The recommended fix for CVE-2015-6070 is to apply the latest security updates provided by Microsoft for Internet Explorer.

What versions of Internet Explorer are affected by CVE-2015-6070?

CVE-2015-6070 affects Internet Explorer versions 7, 8, 9, 10, and 11.

What type of attack can exploit CVE-2015-6070?

CVE-2015-6070 can be exploited through crafted websites that lead to memory corruption.

Is there a way to mitigate risks from CVE-2015-6070?

To mitigate risks from CVE-2015-6070, users should avoid using unsupported versions of Internet Explorer and enable security features such as SmartScreen Filter.