{"id":11326,"date":"2019-10-03T22:29:38","date_gmt":"2019-10-03T20:29:38","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=11326"},"modified":"2023-02-14T15:36:42","modified_gmt":"2023-02-14T14:36:42","slug":"internet-explorer-cumulative-update-kb4524135-10-03-2019","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2019\/10\/03\/internet-explorer-cumulative-update-kb4524135-10-03-2019\/","title":{"rendered":"Internet Explorer: Cumulative Update KB4524135 (10\/03\/2019)"},"content":{"rendered":"

[German<\/a>]Microsoft finally released the cumulative security update KB4524135 for Internet Explorer versions 9 to 11 on October 3, 2019 to close a vulnerability that had become known in September.<\/p>\n

<\/p>\n

The vulnerability CVE-2019-1367 in IE<\/h2>\n

\"\"On September 23, 2019, Microsoft had surprisingly released out-of-band security updates for Internet Explorer that were intended to close the CVE-2019-1367 vulnerability.<\/p>\n

CVE-2019-1367 is a memory corruption vulnerability in IE's scripting engine. This is related to the handling of objects in Internet Explorer memory by the scripting engine. The vulnerability could damage the memory to such an extent that an attacker could execute arbitrary code in the context of the current user.<\/p>\n

An attacker who successfully exploited the vulnerability is granted the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs, view, modify, or delete data, or create new accounts with full user privileges.<\/p><\/blockquote>\n

I had blogged about the updates available for the various Windows versions in the blog post Windows: Vulnerabilities in IE and Defender (09\/23\/2019)<\/a>. According to KB article, the security updates were only available for manual download in the Microsoft Update Catalog und had to be installed manually. However, there were printing issue with the September updates and Microsoft blamed the IE security update for this (see Windows: Printer issues after Sept. 2019 Update confirmed<\/a>).<\/p>\n

Update KB4524135 for Internet Explorer<\/h2>\n

Cumulative Update KB4524135<\/a>, released on October 3, 2019, is available for Internet Explorer 9 \u2013 11 for the following Windows versions:<\/p>\n