CVE-2014-1770

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 11

Description A use-after-free issue allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage function call on a CMarkup object allocated by the CMarkup::CreateInitialMarkup function. This could corrupt memory and allow an attacker to execute arbitrary code in the context of the current user.

Recommendations For Microsoft Internet Explorer versions 6 through 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.