CVE-2015-0050 Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption....
HighCVSS 9.3
EPSS 33.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 8 | No fix listed |
| Microsoft internet explorer | = 9 | No fix listed |
References
- blog.skylined.nl
- 20161125 CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details mailing-list
- 20161122 CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details mailing-list
- 72419 vdb-entry
- 1031723 vdb-entry
- MS15-009 vendor-advisory
- 40841 exploit