Rewterz threat Advisory – Microsoft Internet Explorer Multiple Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2019-0764

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka ‘Microsoft Browsers Tampering Vulnerability’.

CVE-2019-0752

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka ‘Scripting Engine Memory Corruption Vulnerability’.

CVE-2019-0835

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory, aka ‘Microsoft Scripting Engine Information Disclosure Vulnerability’.

CVE-2019-0753

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka ‘Scripting Engine Memory Corruption Vulnerability’.

CVE-2019-0862

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka ‘Scripting Engine Memory Corruption Vulnerability’.

Impact

• System access
• Exposure of sensitive information
• Security Bypass

Affected Vendors

Microsoft

Affected Products

• Microsoft Internet Explorer 9.x
• Microsoft Internet Explorer 10.x
• Microsoft Internet Explorer 11.x

Remediation

Apply update.

Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 (KB4493472):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493472

Internet Explorer 11 on Windows Server 2016 (KB4493470):

Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems (KB4493470):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493470

Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems (KB4493441):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493441

Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems (KB4493441):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493441

Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems (KB4493441):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493441

Internet Explorer 11 on Windows RT 8.1 (KB4493446):

Apply update (please see the vendor’s service database for details).

Internet Explorer 11 on Windows 8.1 for x64-based systems (KB4493446):

Internet Explorer 11 on Windows Server 2012 R2 (KB4493446):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493446

Internet Explorer 11 on Windows 8.1 for 32-bit systems (KB4493446):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493446

Internet Explorer 10 on Windows Server 2012 (KB4493451):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493451

Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems (KB4493464):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493464

Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems (KB4493464):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493464

Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems (KB4493464):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493464

Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems (KB4493470):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493470

Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 (KB4493472):

Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (KB4493472):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493472

Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems (KB4493474):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493474

Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems (KB4493474):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493474

Internet Explorer 11 on Windows 10 for x64-based Systems (KB4493475):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493475

Internet Explorer 11 on Windows 10 for 32-bit Systems (KB4493475):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493475

Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems (KB4493509):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493509

Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems (KB4493509):

Internet Explorer 11 on Windows Server 2019 (KB4493509):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493509

Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems (KB4493509):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493509

Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 (KB4493435):

Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (KB4493435):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493435

Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 (KB4493435):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493435

Internet Explorer 11 on Windows 8.1 for x64-based systems (KB4493435):

Internet Explorer 11 on Windows Server 2012 R2 (KB4493435):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493435

Internet Explorer 11 on Windows 8.1 for 32-bit systems (KB4493435):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493435

Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 (KB4493435):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493435

Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 (KB4493435):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493435

Internet Explorer 10 on Windows Server 2012 (KB4493435):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493435

Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 (KB4493471):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493471

Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 (KB4493471):

https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493471