CVE-2015-6152: Buffer Overflow

Published Dec 9, 2015

Updated

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6162.

Affected Software

6 affected components

Microsoft Internet Explorer=10

Microsoft Windows 7=sp1

Microsoft Windows 8

Microsoft Windows RT

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2012

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-124

Event History

Dec 9, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6152?

CVE-2015-6152 has a high severity rating as it allows remote attackers to execute arbitrary code or cause a denial of service.

How do I fix CVE-2015-6152?

To fix CVE-2015-6152, users should apply the relevant security updates provided by Microsoft.

Which versions of Internet Explorer are affected by CVE-2015-6152?

CVE-2015-6152 specifically affects Microsoft Internet Explorer version 10.

Can CVE-2015-6152 cause data loss?

Yes, CVE-2015-6152 can lead to memory corruption, potentially resulting in data loss.

Is there a specific workaround for CVE-2015-6152?

While a specific workaround for CVE-2015-6152 is not provided, it is advised to disable JavaScript or use alternative browsers until a patch is applied.