The Purpose of this article is to share a quick way to resolve a vulnerability named MS15-124 : Cumulative Security Update for Internet Explorer (CVE-2015-6161) (3125869) . In most of the cases , when information security team performs a vulnerability assessment than the system admins runs windows update manually or deploy them via SCCM . However for this vulnerability , even after you deploy the patch , you still need some registry values in order to close it .
Here are the relevant details .
Vulnerability : MS15-124: Cumulative Security Update for Internet Explorer (CVE-2015-6161) (3125869)
Severity : Medium
Nessus Plugin ID : 134204
CVE : CVE-2015-6161
Proposed Solution :
A specific fix to Run from Microsoft or a registry value must be added to enable the fix for CVE-2015-6161. Also Microsoft has released a set of patches for Windows Vista, 2008, 7, 2008 R2, 8, RT, 2012, 8.1, RT 8.1, 2012 R2, and 10.Refer to KB3125869 for additional information.
Procedure :
If we are talking about a large number of servers than it is better to use SCCM in order to create this registry value . For individual server , follow the procedure mentioned below .
- If you are a system admin , Login to the Windows Server with admin rights and on Run Prompt ,type regedit.exe to open Registry and create these registry keys .
HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_USER32_EXCEPTION_HANDLER_HARDENING\iexplore.exe
And
HKLM\SOFTWARE\Microsoft\ Wow6432Node\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_USER32_EXCEPTION_HANDLER_HARDENING\iexplore.exe
Alternatively you can download the below file and rename it as IE.Reg . Double click on it and Click on Merge to add it .
IE_Registry.reg
References :
