CVE-2015-6154: Buffer Overflow

Published Dec 9, 2015

Updated

Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6150.

Affected Software

6 affected components

Microsoft Edge

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Dec 9, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6154?

CVE-2015-6154 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2015-6154?

To mitigate CVE-2015-6154, users should apply the latest security updates provided by Microsoft for affected versions of Internet Explorer and Edge.

What products are affected by CVE-2015-6154?

CVE-2015-6154 affects Microsoft Internet Explorer versions 7 through 11 and Microsoft Edge.

Can CVE-2015-6154 cause denial of service?

Yes, CVE-2015-6154 can lead to a denial of service condition due to memory corruption.

Is CVE-2015-6154 exploitable by remote attackers?

CVE-2015-6154 is indeed exploitable by remote attackers through crafted web sites.