CVE-2015-0050
high · 9.3Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-8967 and CVE-2015-0044.
9.3
CVSS
33.5%
EPSS (exploit prob.)
98th
EPSS percentile
2015-02-11
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-399
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_explorer | 8 |
| microsoft | internet_explorer | 9 |
Check a specific version with /api/v1/cve/match.
References
- http://blog.skylined.nl/20161122001.html
- http://seclists.org/fulldisclosure/2016/Nov/135
- http://www.securityfocus.com/archive/1/539808/100/0/threaded
- http://www.securityfocus.com/bid/72419
- http://www.securitytracker.com/id/1031723
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009
- https://www.exploit-db.com/exploits/40841/
- http://blog.skylined.nl/20161122001.html
- http://seclists.org/fulldisclosure/2016/Nov/135
- http://www.securityfocus.com/archive/1/539808/100/0/threaded
- http://www.securityfocus.com/bid/72419
- http://www.securitytracker.com/id/1031723
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-009
- https://www.exploit-db.com/exploits/40841/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2015-0050