Microsoft Internet Explorer 11 was found vulnerable to multiple threats that may cause memory corruption.
PUBLISH DATE: 12-10-2018
Two errors were found in the Microsoft Internet Explorer 11. The errors occur when handling objects in memory and can be exploited to corrupt memory and subsequently execute arbitrary code.
When Internet Explorer improperly accesses objects in memory, it gives rise to some errors leading to remote code execution vulnerabilities. The vulnerabilities corrupt the memory in such a way that attackers may execute arbitrary codes on the system using user privileges of the current logged-in user.
The vulnerabilities get more harmful if the current user happens to be logged on with administrative user rights. It’ll let an attacker take control of a system and enable them to modify or delete data, install malicious programs or create more accounts with administrative rights.
In case of an exploit, the attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer. They will then proliferate the link of that website most likely through phishing emails to convince users to visit it.
Compromised websites can also be used for the attack. To exploit the vulnerability, attackers can also submit specially crafted files on websites that accept ads or user-generated content.
Apart from the memory corruption damage, a failed attack will cause denial of service conditions. The security update involves a modification of Internet Explorer in how it handles objects in memory.
Microsoft Internet Explorer 11.x
Apply following updates.
Apply update (please see the vendor’s service database for details).
If you think you’re a victim of a cyber-attack, immediately send an email to firstname.lastname@example.org.