CVE-2015-2449 — Sensitive Information Exposure in Microsoft Internet Explorer

CWE-200 — Sensitive Information Exposure5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
16.6%
top 5.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Internet Explorer
Timeline
PublishedAug 14
Latest updateMay 14

Description

Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/internet_explorer5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-r2c9-mw6q-ccc6: Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Byp↗2022-05-14
▶
CVEList
CVE-2015-2449: Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Byp↗2015-08-14
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday - August 2015↗2015-08-11
▶
Talos
Microsoft Patch Tuesday - August 2015↗2015-08-11
▶
CVE-2015-2449 — Sensitive Information Exposure | cvebase