CVE-2018-8249

Опубликовано: 14 июн. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 7.6

EPSS Средний

Описание

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0978.

Ссылки

http://www.securityfocus.com/bid/104363
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041099
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8249
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104363
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041099
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8249
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:microsoft:windows_7:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8.1:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_rt_8.1:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.29088

Средний

7.5 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2018-8249

CVSS3: 7.5

msrc

около 7 лет назад

Internet Explorer Memory Corruption Vulnerability

GHSA-xgg3-c4wr-66h2

CVSS3: 7.5

github

больше 3 лет назад

EPSS

Процентиль: 96%

0.29088

Средний

7.5 High

CVSS3

7.6 High

CVSS2

Дефекты

CWE-787