CVE ID | CVE-2015-0099 |
CVSS SCORE | 6.8, AV:N/AC:M/Au:N/C:P/I:P/A:P |
AFFECTED VENDORS |
Microsoft |
AFFECTED PRODUCTS |
Internet Explorer |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['17167']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The vulnerability lies in Internet Explorer's key frame creation and its handling of CSS values. An array containing pointers to CSS values can be manipulated with certain CSS directives forcing MSHTML!BuildAnimation to read beyond the bounds of the array. An attacker can leverage this vulnerability to execute code under the context of the browser process. |
ADDITIONAL DETAILS |
Microsoft has issued an update to correct this vulnerability. More details can be found at:
https://technet.microsoft.com/library/security/MS15-018 |
DISCLOSURE TIMELINE |
|
CREDIT | SkyLined |