Sandbox Escape: Microsoft Internet Explorer ActiveX Broker Allows EPM Bypass

This vulnerability (CVE-2015-1743) was reported to Microsoft on March 10, 2015 and has been patched via MS15-056 (https://technet.microsoft.com/library/security/MS15-056).

There is a security vulnerability in Microsoft Internet Explorer’s ActiveX Broker. Successfully exploiting this vulnerability allows an EPM-protected IE process with the “AppContainer” integrity to execute arbitrary code with the “Medium” integrity.