[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247862

 
 

909

 
 

194603

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ASLR bypass vulnerability in Internet Explorer - CVE-2015-0069

ID: oval:org.secpod.oval:def:23537Date: (C)2015-02-12   (M)2022-11-24
Class: VULNERABILITYFamily: windows




The host is installed with Internet Explorer 10 or 11 and is prone to a memory corruption vulnerability. A flaw is present in the application, which fails to use the Address Space Layout Randomization (ASLR) security feature, allowing an attacker to more reliably predict the memory offsets of specific instructions in a given call stack. Successful exploitation could allow attackers to bypass the Address Space Layout Randomization (ASLR) security feature.

Platform:
Microsoft Windows 7
Microsoft Windows Server 2008 R2
Microsoft Windows 8
Microsoft Windows Server 2012
Microsoft Windows 8.1
Microsoft Windows Server 2012 R2
Product:
Microsoft Internet Explorer 10
Microsoft Internet Explorer 11
Reference:
CVE-2015-0069
CVE    1
CVE-2015-0069
CPE    17
cpe:/o:microsoft:windows_server_2008:r2:sp1:x64
cpe:/o:microsoft:windows_7::sp1:x64
cpe:/o:microsoft:windows_7::sp1:x86
cpe:/o:microsoft:windows_7:::x64
...

© SecPod Technologies