9/15/2023 0 Comments Free internet explorer 11 downloadThe attack is made possible by leveraging a flaw in Visual Basic Script ( VBScript), an Active Scripting language introduced in Internet Explorer 3.īy passing arbitrary data to an array and then shrinking it within the IE VBScript engine, a failure code can be triggered but yet the array remains unchanged. Not only is the scope of this vulnerability extremely wide, but it is also capable of " sidestepping the Enhanced Protected Mode (EPM) sandbox in IE 11 as well as the highly regarded Enhanced Mitigation Experience Toolkit (EMET) anti-exploitation tool" according to Robert Freeman, Manager, IBM X-Force Research. The flaw was originally discovered by researchers at IBM X-Force in May 2014, and has been assigned CVE-2014-6332 with a CVSS score (severity index) of 9.3. The bug, which comes from an old Windows library, could allow an attacker to remotely compromise a computer via a drive-by download attack. In its latest Patch Tuesday, Microsoft fixed a critical vulnerability that has existed since Windows 95 and affects Internet Explorer 3 all the way up to Internet Explorer 11.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |