On December 8, 2015, Microsoft released Cumulative Security Update MS15-124 for Internet Explorer to address several reported vulnerabilities, also known as KB3116180.
The update also requires a registry change to be fully compliant. Beginning in January, eVMS began reporting plugin id 87253, MS15-124: Cumulative Security Update for Internet Explorer (3116180) as a High. To help address this vulnerability, a fixlet has been made available in the IEM Endpoint Manager Console based on the MS15-124 Microsoft fixit.
In IEM, search for 3125869.
Select the fixlet titled: 3125869: Vulnerability in Internet Explorer could lead to ASLR bypass – Enable the User32 Exception.
More information about deploying IEM fixlets can be found here.
