JVN#27443259: Internet Explorer vulnerable to arbitrary code execution

Internet Explorer contains a vulnerability that may allow arbitrary code execution.

According to Microsoft, targeted attacks that attempt to exploit this vulnerability have been confirmed but are limited.

Impact

If a user views a specially crafted web page, an arbitrary code may be executed.

Solution

Apply an update
Apply Cumulative Security Update for Internet Explorer (2879017) according to the information provided by Microsoft.

**Apply a workaround **The following workarounds may mitigate the affects of this vulnerability.

• Apply Fix it 51001
• Apply Enhanced Mitigation Experience Toolkit (EMET)
• Restrict the execution of ActiveX control and Active Script
  For more information, please see “Suggested Actions” of Microsoft Security Advisory (2887505).

Products Affected

• Microsoft Internet Explorer 6.0
• Windows Internet Explorer 7
• Windows Internet Explorer 8
• Windows Internet Explorer 9
• Internet Explorer 10
• Internet Explorer 11