PT-2014-1079
CVE-2014-1791
·
تاريخ النشر
2014-06-10
·
تاريخ التحديث
2018-10-12
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 7 through 11
Description
The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service. It is caused by improper access to objects in memory, which can be exploited by attackers using a crafted web site. The vulnerability is also described as a use-after-free error when working with a CTreeNode object, enabling remote execution of arbitrary code.
Recommendations
For Microsoft Internet Explorer versions 7 through 11, update to a version that includes the fix for this memory corruption issue to prevent exploitation. As a temporary workaround, consider restricting access to potentially malicious web sites to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾