CVE-2015-2444

Related Files

Microsoft Internet Explorer CTreeNode::GetCascadedLang Use-After-Free

Posted Aug 12, 2015

Authored by Moritz Jodeit | Site bluefrostsecurity.de

Microsoft Internet Explorer 11 is prone to a use-after-free vulnerability in the MSHTML!CTreeNode::GetCascadedLang function. The following analysis was performed on Internet Explorer 11 on Windows 8.1 (x64). If an attacker succeeds in bypassing the Memory Protector and Isolated Heap protection mechanisms this vulnerability allows the execution of arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

tags | exploit, arbitrary

systems | windows

advisories | CVE-2015-2444

SHA-256 | 1ab54ed16c416f2c380415334ef8a0ac58296c12aa60e0f295c012e60b25b90f

Download | Favorite | View