Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10648
HistoryAug 11, 2015 - 12:00 a.m.

KLA10648 Multiple vulnerabilities in Internet Explorer

2015-08-1100:00:00
Kaspersky Lab
threats.kaspersky.com
35

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.93 High

EPSS

Percentile

99.0%

JSON

Detect date:

08/11/2015

Severity:

High

Description:

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to Bypass security restrictions, execute arbitrary code or obtain sensitive information.

Affected products:

Microsoft Internet Explorer versions from 7 through 11

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2015-2423
CVE-2015-2449
CVE-2015-2441
CVE-2015-2446
CVE-2015-2442
CVE-2015-2448
CVE-2015-2447
CVE-2015-2444
CVE-2015-2443
CVE-2015-2450
CVE-2015-2445
CVE-2015-2452
CVE-2015-2451

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2015-24234.3Warning
CVE-2015-24494.3Warning
CVE-2015-24419.3Critical
CVE-2015-24469.3Critical
CVE-2015-24429.3Critical
CVE-2015-24489.3Critical
CVE-2015-24479.3Critical
CVE-2015-24449.3Critical
CVE-2015-24439.3Critical
CVE-2015-24509.3Critical
CVE-2015-24454.3Warning
CVE-2015-24529.3Critical
CVE-2015-24519.3Critical

Microsoft official advisories:

KB list:

3081436
3078071
3082442

Exploitation:

Public exploits exist for this vulnerability.

References

Related

openvas 8
nessus 4
mskb 4
cvelist 13
prion 13
cve 13
securityvulns 2
symantec 13
checkpoint_advisories 9
zdi 5
exploitpack 1
zdt 2
packetstorm 1
exploitdb 1
threatpost 1
kaspersky 2
openvas
openvas
Microsoft Internet Explorer Multiple Vulnerabilities (3082442)
2015-08-12 00:00:00
Microsoft Edge Multiple Vulnerabilities (3084525)
2016-01-08 00:00:00
Microsoft Windows Command Line Parameter Information Disclosure Vulnerability (3082458)
2015-08-12 00:00:00
nessus
nessus
MS15-079: Cumulative Security Update for Internet Explorer (3082442)
2015-08-11 00:00:00
MS15-091: Cumulative Security Update for Microsoft Edge (3084525)
2015-08-11 00:00:00
MS15-088: Unsafe Command Line Parameter Passing Could Allow Information Disclosure (3082458)
2015-08-11 00:00:00
mskb
mskb
MS15-079: Cumulative security update for Internet Explorer: August 11, 2015
2015-08-11 00:00:00
MS15-091: Cumulative security update for Microsoft Edge: August 11, 2015
2015-08-11 00:00:00
MS15-088: Unsafe command-line parameter passing could allow information disclosure: August 11, 2015
2015-08-11 00:00:00
cvelist
cvelist
CVE-2015-2452
2015-08-14 10:00:00
CVE-2015-2441
2015-08-14 10:00:00
CVE-2015-2442
2015-08-14 10:00:00
prion
prion
Memory corruption
2015-08-14 10:59:00
Memory corruption
2015-08-14 10:59:00
Memory corruption
2015-08-14 10:59:00
cve
cve
CVE-2015-2441
2015-08-14 10:59:00
CVE-2015-2452
2015-08-14 10:59:00
CVE-2015-2444
2015-08-14 10:59:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-08-24 00:00:00
BFS-SA-2015-001: Internet Explorer CTreeNode::GetCascadedLang Use-After-Free Vulnerability
2015-08-24 00:00:00
symantec
symantec
Microsoft Internet Explorer and Edge CVE-2015-2441 Remote Memory Corruption Vulnerability
2015-08-11 00:00:00
Microsoft Internet Explorer and Edge CVE-2015-2442 Remote Memory Corruption Vulnerability
2015-08-11 00:00:00
Microsoft Internet Explorer CVE-2015-2445 ASLR Security Bypass Vulnerability
2015-08-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Memory Corruption (MS15-079: CVE-2015-2442)
2015-08-11 00:00:00
Microsoft Internet Explorer Memory Corruption (MS15-079: CVE-2015-2450)
2015-08-11 00:00:00
Microsoft Internet Explorer Information Disclosure (MS15-079: CVE-2015-2423)
2015-08-11 00:00:00
zdi
zdi
Microsoft Internet Explorer Array Type Confusion Remote Code Execution Vulnerability
2015-08-11 00:00:00
Microsoft Internet Explorer stack Property Descriptor Type Confusion Remote Code Execution Vulnerability
2015-08-11 00:00:00
Microsoft Internet Explorer COrphanedStyleSheetArray Use-After-Free Remote Code Execution Vulnerability
2015-08-11 00:00:00
exploitpack
exploitpack
Microsoft Internet Explorer - CTreeNode::GetCascadedLang Use-After-Free (MS15-079)
2015-08-12 00:00:00
zdt
zdt
Microsoft Internet Explorer 11 CTreeNode::GetCascadedLang Use-After-Free Exploit
2015-08-13 00:00:00
Microsoft Internet Explorer CStyleAttrArray Use-After-Free Remote Code Execution Vulnerability
2015-08-17 00:00:00
packetstorm
packetstorm
Microsoft Internet Explorer CTreeNode::GetCascadedLang Use-After-Free
2015-08-12 00:00:00
exploitdb
exploitdb
Microsoft Internet Explorer - CTreeNode::GetCascadedLang Use-After-Free (MS15-079)
2015-08-12 00:00:00
threatpost
threatpost
August 2015 Microsoft Patch Tuesday Security Bulletins
2015-08-11 14:56:53
kaspersky
kaspersky
KLA10646 Multiple vulnerabilities in Microsoft Windows
2015-08-11 00:00:00
KLA10645 Multiple vulnerabilities in Microsoft Office
2015-08-11 00:00:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.93 High

EPSS

Percentile

99.0%

JSON
Related for KLA10648
openvas8nessus4mskb4cvelist13prion13cve13securityvulns2symantec13checkpoint_advisories9zdi5exploitpack1zdt2packetstorm1exploitdb1threatpost1kaspersky2