CVE-2020-1092: 
vulnerability analysis and mitigation

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, known as 'Internet Explorer Memory Corruption Vulnerability' (CVE-2020-1092). This vulnerability was discovered and reported in November 2019, affecting various versions of Internet Explorer and Windows systems (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified under CWE-787 (Out-of-bounds Write). The technical assessment indicates that the vulnerability requires user interaction and network access for exploitation (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights (NVD).

The vulnerability requires user interaction, where the victim must visit a malicious webpage or open a malicious document. The attack complexity is rated as high, indicating that specific conditions need to be met for successful exploitation (NVD).

Microsoft has released security updates to address this vulnerability. Users are advised to apply the appropriate security updates through the Microsoft Security Update Guide (MSRC).