CVE-2015-6158: Buffer Overflow

Published Dec 9, 2015

Updated

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6159, and CVE-2015-6160.

Affected Software

2 affected components

Microsoft Edge

Microsoft Internet Explorer=11

Event History

Dec 9, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6158?

CVE-2015-6158 is rated as critical due to the potential for remote code execution and denial of service.

How do I fix CVE-2015-6158?

The recommended fix for CVE-2015-6158 is to apply the security updates provided by Microsoft.

What software versions are affected by CVE-2015-6158?

CVE-2015-6158 affects Microsoft Internet Explorer 11 and Microsoft Edge.

What type of attacks can be executed using CVE-2015-6158?

CVE-2015-6158 allows attackers to execute arbitrary code or cause a denial of service through memory corruption.

When was CVE-2015-6158 disclosed?

CVE-2015-6158 was disclosed in the Microsoft security bulletin MS15-124.