PT-2014-1047

CVE-2014-0274

Published

2014-02-11

Updated

2018-10-12

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified)

Description The issue is related to a use-after-free error when handling the CDomRange object, allowing an attacker to execute arbitrary code or cause a denial of service by visiting a specially crafted website. This could corrupt memory, enabling the attacker to execute code in the context of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Arthur Gerkis

Lokihardt@Asrt

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2014-0274

BDU:2014-00129