Veille CVE
CVE-2019-0752
7.5 Élevée Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Microsoft Internet Explorer Type Confusion Vulnerability
Ajoutée le 15/02/2022 · Échéance de correction (agences US) : 15/08/2022
Action requise : Apply updates per vendor instructions.
Description
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0739, CVE-2019-0753, CVE-2019-0862.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.5 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 7.5 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 7.6 Élevée | nvd@nist.gov (NVD) | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html ExploitThird Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752 PatchVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-19-359/ Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/153078/Microsoft-Internet-Explorer-Windows-10-1809-17763.316-Memory-Corruption.html ExploitThird Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0752 PatchVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-19-359/ Third Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0752 US Government Resource