CVE-2015-6140: Buffer Overflow

Published Dec 9, 2015

Updated

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160.

Affected Software

2 affected components

Microsoft Edge

Microsoft Internet Explorer=11

Event History

Dec 9, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6140?

CVE-2015-6140 is considered a critical severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2015-6140?

To fix CVE-2015-6140, users should apply the security updates provided by Microsoft for Internet Explorer 11 and Microsoft Edge.

What are the risks associated with CVE-2015-6140?

The risks of CVE-2015-6140 include potential remote code execution and denial of service attacks due to memory corruption.

Who is affected by CVE-2015-6140?

CVE-2015-6140 affects users of Microsoft Internet Explorer 11 and Microsoft Edge browsers.

Can CVE-2015-6140 be exploited through malicious websites?

Yes, CVE-2015-6140 can be exploited by attackers through specially crafted malicious websites.