CVE-2015-6134

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka…

published December 9, 2015

CVSS
—
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

⚠️ A crafty website could turn Internet Explorer 9 into an attacker's playground! This memory corruption vulnerability is a surprising gateway for remote code execution. 🔥 Think of this as a restaurant where a diner can convince the chef to cook whatever they want — a malicious site can instruct your browser to execute unwanted commands, much like a server misreading an order. An attacker could execute arbitrary code on your system, potentially granting them full control over your device! Alternatively, they might cause a denial of service, leaving your browser crashing and burning.

Put simply

Think of this as a restaurant where a diner can convince the chef to cook whatever they want — a malicious site can instruct your browser to execute unwanted commands, much like a server misreading an order. This vulnerability arises from memory corruption issues within Microsoft Internet Explorer 9, allowing attackers to execute harmful code through specially crafted web pages.

What to do

An attacker could execute arbitrary code on your system, potentially granting them full control over your device! Alternatively, they might cause a denial of service, leaving your browser crashing and burning. To protect yourself, consider moving on from Internet Explorer 9 to a more secure browser. If you must use this version, ensure that your security settings are as high as they can go and utilize active anti-malware tools to help catch any malicious activity. 🔒 You've got this! By staying vigilant and proactive, you can keep your browsing experience safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18420 · 97.2th percentile
Published
2015-12-09T11:00Z
EPSS history
Timeline
  • 09 DEC 11:00Z
    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka…
    cvelistv5