PT-2014-1079
CVE-2014-1791
·
Published
2014-06-10
·
Updated
2018-10-12
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 7 through 11
Description
The issue is related to memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service. It is caused by improper access to objects in memory, which can be exploited by attackers using a crafted web site. The vulnerability is also described as a use-after-free error when working with a CTreeNode object, enabling remote execution of arbitrary code.
Recommendations
For Microsoft Internet Explorer versions 7 through 11, update to a version that includes the fix for this memory corruption issue to prevent exploitation. As a temporary workaround, consider restricting access to potentially malicious web sites to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾