Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR Bypass."

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3125869 and/or a Registry key to prevent the host against CVE-2015-6161. It is, therefore, affected by Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka 'Microsoft Browser ASLR Bypass'.
An unauthenticated, remote attacker can exploit this issue by convincing a user to visit a specially craftedwebsite, resulting in the execution of arbitrary code in the context of the current user.

A specific Fix to Run from Microsoft or a registry value must be added to enable the fix for CVE-2015-6161.

The version of Microsoft Edge installed on the remote host is missing Cumulative Security Update 3116184. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3116180. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.

ID	Name	Product	Family	Severity
134204	MS15-124: Cumulative Security Update for Internet Explorer (CVE-2015-6161) (3125869)	Nessus	Windows : Microsoft Bulletins	low
87254	MS15-125: Cumulative Security Update for Microsoft Edge (3116184)	Nessus	Windows : Microsoft Bulletins	high
87253	MS15-124: Cumulative Security Update for Internet Explorer (3116180)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2015-6161

medium

Tenable Plugins

low

high

critical