Microsoft Internet Explorer CVE-2015-1626 Remote Memory Corruption Vulnerability

Bugtraq ID:	72930
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-1626
Remote:	Yes
Local:	No
Published:	Mar 10 2015 12:00AM
Updated:	May 07 2015 06:24PM
Credit:	ca0nguyen, working with HP's Zero Day Initiative
Vulnerable:	Avaya Messaging Application Server 5.2 Avaya Meeting Exchange - Webportal 0 Avaya CallPilot 5.0 Avaya CallPilot 4.0
Not Vulnerable:

Microsoft Internet Explorer CVE-2015-1626 Remote Memory Corruption Vulnerability

Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability.

Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage.

Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions.

Internet Explorer 11 is vulnerable.

Microsoft Internet Explorer CVE-2015-1626 Remote Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Internet Explorer CVE-2015-1626 Remote Memory Corruption Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Internet Explorer Homepage (Microsoft)