Title

Microsoft Command Line Parameter Information Disclosure Vulnerability (MS15-088) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing an information disclosure vulnerability in Windows, Internet Explorer and Microsoft Office. To exploit this vulnerability, an attacker would first have to use another vulnerability in Internet Explorer to execute code in Internet Explorer with Ehnanced Protection Mode (EPM). If successfully exploited, an attacker would gain access to sensitive information and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-61313

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.