PT-2015-1157

CVE-2015-1691

·

Published

2015-05-12

·

Updated

2018-10-12

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Internet Explorer versions 8 through 9
Description The issue is related to memory corruption errors. It allows a remote attacker to execute arbitrary code or cause a denial of service via a specially crafted web site. This could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could take complete control of the system, install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations For Internet Explorer versions 8 and 9, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to web sites that could potentially exploit this issue until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾