CVE-2018-8249

Description

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka Internet Explorer Memory Corruption Vulnerability. This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0978.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
45.916

Associated Vulnerability

VulnerabilityOS Platform
Media Foundation Memory Corruption Vulnerability for Windows Server 2012 R2 for x64-based Systems (KB4284815)Windows
Media Foundation Memory Corruption Vulnerability for Windows 8.1 for x64-based Systems (KB4284815)Windows
Media Foundation Memory Corruption Vulnerability for Windows 8.1 for x86-based Systems (KB4284815)Windows
Media Foundation Memory Corruption Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4284826)Windows
Media Foundation Memory Corruption Vulnerability for Windows 7 for x64-based Systems (KB4284826)Windows
Media Foundation Memory Corruption Vulnerability for Windows 7 for x86-based Systems (KB4284826)Windows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 10 for Windows Server 2012 (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 for x64-based Systems (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 7 (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows Server 2012 R2 (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 11 for Windows 8.1 (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB4230450) - CumulativeWindows
Internet Explorer Memory Corruption Vulnerability for Internet Explorer 9 for Windows Server 2008 (KB4230450) - CumulativeWindows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-247162018-06 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB4284815)
PATCH-247172018-06 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB4284815)
PATCH-247152018-06 Security Monthly Quality Rollup for Windows 8.1 for x86-based Systems (KB4284815)
PATCH-247142018-06 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4284826)
PATCH-247132018-06 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4284826)
PATCH-247122018-06 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4284826)
PATCH-24707Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 (KB4230450)
PATCH-24709Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4230450)
PATCH-24708Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB4230450)
PATCH-24705Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB4230450)
PATCH-24704Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB4230450)
PATCH-24711Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB4230450)
PATCH-24706Cumulative Security Update for Internet Explorer 11 for Windows 8.1 (KB4230450)
PATCH-24710Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB4230450)
PATCH-24703Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB4230450)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234