CVE-2015-6159: Buffer Overflow

Published Dec 9, 2015

Updated

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, and CVE-2015-6160.

Affected Software

2 affected components

Microsoft Edge

Microsoft Internet Explorer=11

Event History

Dec 9, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6159?

CVE-2015-6159 has been rated as critical due to its potential to allow remote code execution.

How do I fix CVE-2015-6159?

To fix CVE-2015-6159, upgrade to the latest version of Microsoft Internet Explorer or Microsoft Edge that includes security patches.

What systems are affected by CVE-2015-6159?

CVE-2015-6159 affects Microsoft Internet Explorer 11 and Microsoft Edge.

What type of vulnerability is CVE-2015-6159?

CVE-2015-6159 is classified as a memory corruption vulnerability that can be exploited via a crafted web site.

Can CVE-2015-6159 lead to a denial of service?

Yes, CVE-2015-6159 can cause a denial of service due to memory corruption.