CVE-2015-6184: Critical severity internet explorer vulnerability

Published Mar 9, 2016

Updated

The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and memory corruption) via a malformed Cascading Style Sheets (CSS) token sequence in conjunction with modifications to HTML elements, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6048 and CVE-2015-6049.

Affected Software

6 affected components

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Microsoft Windows 10

Event History

Mar 9, 2016

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6184?

CVE-2015-6184 has a critical severity rating due to its potential to allow remote code execution.

How do I fix CVE-2015-6184?

To fix CVE-2015-6184, it is essential to apply the security updates released by Microsoft for Internet Explorer.

Which versions of Internet Explorer are affected by CVE-2015-6184?

CVE-2015-6184 affects Internet Explorer versions 7, 8, 9, 10, and 11.

What types of attacks can exploit CVE-2015-6184?

CVE-2015-6184 can be exploited for arbitrary code execution and denial of service due to memory corruption.

Is CVE-2015-6184 present on Windows 10?

CVE-2015-6184 does not affect Windows 10 when used with the most recent version of Internet Explorer.