PT-2014-1049

CVE-2014-1764

·

تاريخ النشر

2014-04-27

·

تاريخ التحديث

2018-10-12

الوصف من

CVSS 2.0
10
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 7 through 11
Description The issue allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging object confusion in a broker process. It is also related to a use-after-free error, which enables an attacker to execute arbitrary code using a specially crafted website. Additionally, there is an elevation of privilege vulnerability that could be used in conjunction with another vulnerability to run arbitrary code with elevated privileges.
Recommendations For Microsoft Internet Explorer versions 7 through 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾