Internet Explorer 8 and 10 Memory Corruption Vulnerability

Successful exploitation can allow remote code execution in the security context of the current user. If the user has administrative privileges, the attacker may be able to fully compromise the affected system. The provided content also states that the vulnerability may be used to cause denial of service through memory corruption.

The provided content states that Microsoft identified no mitigating factors and no workarounds for the memory corruption vulnerabilities addressed by this bulletin. On Windows Server platforms, Internet Explorer Enhanced Security Configuration reduces exposure to malicious web content, but this is a general exposure reduction measure rather than a complete mitigation.

Apply Microsoft's Security Update 3034682 and any prerequisite or companion updates required for the affected Internet Explorer version and platform. The provided content states that for Internet Explorer 9, 10, and 11, both update 3021952 and update 3034196 were required for full protection, with additional automatic installation of updates 3023607 and, on some platforms, 3036197. Although CVE-2015-0049 specifically affects Internet Explorer 8 and 10 per the provided description, remediation should follow Microsoft's bulletin guidance for the affected product/version combination.