The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the way     that the scripting engine handles objects in memory in     Internet Explorer. The vulnerability could corrupt     memory in such a way that an attacker could execute     arbitrary code in the context of the current user. An     attacker who successfully exploited the vulnerability     could gain the same user rights as the current user.
    (CVE-2019-0752, CVE-2019-0753, CVE-2019-0862)

  - An information disclosure vulnerability exists when the     scripting engine does not properly handle objects in     memory. An attacker who successfully exploited the     vulnerability could obtain information to further     compromise the users system.  (CVE-2019-0835)

  - A tampering vulnerability exists when Microsoft browsers     do not properly validate input under specific     conditions. An attacker who exploited the vulnerability     could pass custom command line parameters.
    (CVE-2019-0764)

Detections

Analytics

Security Updates for Internet Explorer (April 2019)

high Nessus Plugin ID 123951

Version 1.10

Version 1.9

Version 1.8

Version 1.10 Mar 11, 2025, 10:37 AM CVSS metrics ("CVSSv3 score" set to 7.5) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSSv3 score source (changed from "manual" to none) Plugin Feed: 202503111037
Version 1.9 Feb 18, 2025, 11:54 PM Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed) Plugin Feed: 202502182354
Version 1.8 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311