Lucene search

K
cve[email protected]CVE-2015-6045
HistoryNov 13, 2015 - 3:59 a.m.

CVE-2015-6045

2015-11-1303:59:01
web.nvd.nist.gov
27
cve-2015-6045
use-after-free vulnerability
internet explorer
remote code execution
denial of service
memory corruption

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.123 Low

EPSS

Percentile

95.4%

Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript that improperly interacts with use of the Cascading Style Sheets (CSS) empty-cells property for a TABLE element, aka “Internet Explorer Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch11-

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.123 Low

EPSS

Percentile

95.4%