CVE-2020-1062: Internet Explorer Memory Corruption Vulnerability
CVE-2020-1062 is a remote code execution vulnerability in Internet Explorer, rated Moderate by Microsoft, with a CVSS 3.0 base score of 6.4 (Medium). An attacker can exploit it remotely over the network, with high privileges and only if a user takes an action. Microsoft has not reported exploitation in the wild and rates exploitation as more likely. The EPSS model estimates a 6.24% probability of exploitation activity in the next 30 days, higher than 94% of all scored vulnerabilities. Microsoft released the fix on 12 May 2020 in the May 2020 Patch Tuesday, delivered through 11 security updates (KB4556860, KB4556798, KB4556807, KB4551853 and more). It affects 31 products in 2 product families (ESU, Browser).
Key facts
- CVE ID
- CVE-2020-1062
- Severity
- Medium CVSS 6.4
- Microsoft severity
- Moderate
- Impact
- Remote Code Execution
- Exploited in the wild
- No
- Publicly disclosed
- No
- Exploitation likelihood
- More Likely
- Weakness
- CWE-787
- EPSS
- 6.24% (percentile 94%)
- CISA KEV
- Not listed
- Released
- Last updated
- Patch Tuesday
- May 2020 Patch Tuesday
- Product families
- ESU, Browser
CVSS score and vector
Microsoft scores CVE-2020-1062 at 6.4 (temporal 5.8) using CVSS 3.0. Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
| Metric | Value |
|---|---|
| Attack vector | Network |
| Attack complexity | High |
| Privileges required | High |
| User interaction | Required |
| Scope | Unchanged |
| Confidentiality impact | High |
| Integrity impact | High |
| Availability impact | High |
| Exploit code maturity | Proof of concept |
| Remediation level | Official fix |
| Report confidence | Confirmed |
NVD scores it 7.5 (HIGH) with CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.
Description
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.
The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.
Affected products (31)
ESU
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 | KB4556860 KB4556798 | Monthly Rollup IE Cumulative | Yes Yes | |
| Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 | KB4556860 KB4556798 | Monthly Rollup IE Cumulative | Yes Yes |
Browser
| Product | Security update | Type | Fixed build | Restart |
|---|---|---|---|---|
| Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems | KB4556807 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems | KB4556807 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems | KB4556807 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems | KB4551853 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems | KB4551853 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems | KB4551853 | Security Update | Yes | |
| Internet Explorer 11 on Windows Server 2019 | KB4551853 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems | KB4556799 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems | KB4556799 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems | KB4556799 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems | KB4556812 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems | KB4556812 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems | KB4556812 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems | KB4556799 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems | KB4556799 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems | KB4556799 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 for 32-bit Systems | KB4556826 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 for x64-based Systems | KB4556826 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems | KB4556813 | Security Update | Yes | |
| Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems | KB4556813 | Security Update | Yes | |
| Internet Explorer 11 on Windows Server 2016 | KB4556813 | Security Update | Yes | |
| Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 | KB4556798 KB4556836 | IE Cumulative Monthly Rollup | Yes Yes | |
| Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 | KB4556798 KB4556836 | IE Cumulative Monthly Rollup | Yes Yes | |
| Internet Explorer 11 on Windows 8.1 for 32-bit systems | KB4556798 KB4556846 | IE Cumulative Monthly Rollup | Yes Yes | |
| Internet Explorer 11 on Windows 8.1 for x64-based systems | KB4556798 KB4556846 | IE Cumulative Monthly Rollup | Yes Yes | |
| Internet Explorer 11 on Windows RT 8.1 | KB4556846 | Monthly Rollup | Yes | |
| Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 | KB4556798 KB4556836 | IE Cumulative Monthly Rollup | Yes Yes | |
| Internet Explorer 11 on Windows Server 2012 | KB4556798 KB4556840 | IE Cumulative Monthly Rollup | Yes Yes | |
| Internet Explorer 11 on Windows Server 2012 R2 | KB4556798 KB4556846 | IE Cumulative Monthly Rollup | Yes Yes |
Security updates (11)
NIST NVD data
- NVD status
- Modified
- NVD CVSS
- 7.5 (HIGH)
- NVD weakness
- CWE-787
- Published to NVD
- NVD last modified
Affected configurations (CPE)
| Product | Vulnerable versions |
|---|---|
| internet explorer 9 | all listed versions |
| internet explorer 11 | all listed versions |
References
Acknowledgments
Revision history
| Version | Date | Description |
|---|---|---|
| 1.0 | Information published. |