PT-2015-2320

CVE-2015-2548

·

Published

2015-10-14

·

Updated

2018-10-12

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version
Description The issue is related to a use-after-free vulnerability in the Windows Shell component, specifically in the Tablet Input Band. This vulnerability can be exploited by a remote attacker using a specially crafted web site, allowing them to execute arbitrary code.
Recommendations For Microsoft Windows Vista SP2 and Windows 7 SP1, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability for other affected versions.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾