Cyber Risks · Unit 42 Palo Alto Networks

Palo Alto Networks Identifies 15 Critical Internet Explorer Vulnerabilities

Summary: Palo Alto Networks researchers discovered 15 new critical Internet Explorer vulnerabilities affecting IE versions 6 through 11, each allowing full remote code execution through memory corruption, documented in Microsoft Security Bulletin MS14-052 as part of the September 2014 bulletins. Researcher Bo Qu is credited with the 15 vulnerabilities, which were disclosed to Microsoft through the Microsoft Active Protections Program.

Bottom line: The same team found 22 IE vulnerabilities in June 2014, 10 in July and 3 in August, and the source frames these flaws as one weapon used by Advanced Persistent Threats to compromise enterprise networks - a reminder that unpatched browsers on older versions remain an active entry point.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Vulnerabilities & Patching
Related