# MA-509.082015: MyCERT Alert - Microsoft Releases Critical Security Update for Internet Explorer

**Date:** 21 Aug 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-509.082015  
**Advisory ID:** MA-509.082015

---

#### **1.0 Introduction**
Microsoft has released a critical security update to address a vulnerability in Internet Explorer. Exploitation of this vulnerability could allow a remote attacker to take control of an affected system if the user views a specially crafted webpage.
**2.0 Impact**
The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.
**3.0 Affected Products**
- Internet Explorer 7, 8, 9, 10 and 11 on multiple Windows platform.
**4.0 Recommendation**
Affected users are recommended to perform the update immediately according to the following IE and Windows versions as per below:
**Internet Explorer 7**
| --- | Windows Vista Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?familyid=fdc9a2ff-11ba-4b3d-9cc4-d5e236eb62e6> | Windows Vista x64 Edition Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?familyid=908bd2cf-630b-4715-84c4-c3cbd870d608> | Windows Server 2008 for 32-bit Systems Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?familyid=f40669c3-2a8d-4bbf-bb74-82aaac679b65> | Windows Server 2008 for x64-based Systems Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?familyid=6501aafb-a123-4956-b70c-7bf209695ddf> | Windows Server 2008 for Itanium-based Systems Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?familyid=77545ff7-ee00-4f73-9bb6-df8171a7a8fc> |
**Internet Explorer 8**
| --- | Windows Vista Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=4917a747-d4b5-4faa-b859-cb38ecd8dd3b> | Windows Vista x64 Edition Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=fc37cccd-3909-4ba2-be82-0f44144ab3ba> | Windows Server 2008 for 32-bit Systems Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=578a2d2a-2d13-4588-8ca3-3149286960d8> | Windows Server 2008 for x64-based Systems Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=32b112fb-b6b5-4a61-9331-900ea3bf912f> | Windows 7 for 32-bit Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=569bfacd-d612-4504-9bd4-7af42958cb9d> | Windows 7 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=11de8d57-295a-41db-b179-f94979259e26> | Windows Server 2008 R2 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=d528a684-df53-48d8-b1b8-1dbdf815782c> | Windows Server 2008 R2 for Itanium-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=1d5e7c73-139a-4263-aef9-02fb2aba957f> |
**Internet Explorer 9**
| --- | Windows Vista Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=ea1a609d-10f8-4f78-a230-0a7892d24cf3> | Windows Vista x64 Edition Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=4da928c7-c9c4-45c5-84f9-05cad38cc261> | Windows Server 2008 for 32-bit Systems Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=4e3c0593-dc45-4def-ae53-5d6b23bf47bc> | Windows Server 2008 for x64-based Systems Service Pack 2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=4fdd0d5e-6929-4dfa-b0e5-160465d54e4a> | Windows 7 for 32-bit Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=0baf2b37-bdb8-412d-a8ec-32b1d97343b8> | Windows 7 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=607663a8-4b76-4c02-ba59-281352a78c29> | Windows Server 2008 R2 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=7857857e-93ee-47aa-a14c-4d7b6d258187> |
**Internet Explorer 10**
| --- | Windows 7 for 32-bit Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=e9bc0f6d-308e-4094-8012-a2282158a599> | Windows 7 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=150f2735-3a7d-4497-b2e4-698ec0b6af36> | Windows Server 2008 R2 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=08d4be9b-7283-4718-9bb5-68755090146a> | Windows 8 for 32-bit Systems  <https://www.microsoft.com/downloads/details.aspx?FamilyID=47b4ec1c-2ca6-49b2-882e-c5262fef540d> | Windows 8 for x64-based Systems  <https://www.microsoft.com/downloads/details.aspx?FamilyID=b08a013a-9335-47eb-9f00-9d31b99184bc> | Windows Server 2012  <https://www.microsoft.com/downloads/details.aspx?FamilyID=825724a0-0b2f-4312-94e5-b52dc7367c29> | Windows RT\* |
**Internet Explorer 11**
| --- | Windows 7 for 32-bit Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=77b5f5cd-efd5-4fb5-a01c-66b0b1c7f66d> | Windows 7 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=4d5fb8a9-bb7c-4dc1-823e-3f2394cf3089> | Windows Server 2008 R2 for x64-based Systems Service Pack 1  <https://www.microsoft.com/downloads/details.aspx?FamilyID=114f134e-27d4-4998-9a27-fe678a201669> | Windows 8.1 for 32-bit Systems  <https://www.microsoft.com/downloads/details.aspx?FamilyID=5fb74b22-3fc7-413d-b913-4425acc616be> | Windows 8.1 for x64-based Systems  <https://www.microsoft.com/downloads/details.aspx?FamilyID=74577736-ce17-4722-96b2-831a890309e7> | Windows Server 2012 R2  <https://www.microsoft.com/downloads/details.aspx?FamilyID=8df9eae6-bd91-4df8-bf51-4117056b6983> | Windows RT 8.1\* | Windows 10 for 32-bit Systems \*\*  <https://support.microsoft.com/en-us/kb/3081444> | Windows 10 for x64-based Systems \*\*  <https://support.microsoft.com/en-us/kb/3081444> |
\* Available via Windows Update.
\*\* The Windows 10 update is cumulative.
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#197a607b7c6b202020597a607b7c6b6a7c7a6c6b706d60377460) or [[email protected]](/cdn-cgi/l/email-protection#0c61756f697e784c61756f697e7822637e6b226175) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my> 
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2015/08/19/Microsoft-Releases-Critical-Security-Update-Internet-Explorer>
- <https://technet.microsoft.com/en-us/library/security/ms15-093.aspx>