CVE-2014-0287: Buffer Overflow
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0281.
Affected Software
Event History
Frequently Asked Questions
Which Internet Explorer deployments are affected?
Internet Explorer versions 8 through 11 are affected. The issue is remotely reachable over the network and does not require attacker authentication.
What does an attacker need to do to exploit this vulnerability?
An attacker needs to get a user to process a crafted web site in a vulnerable Internet Explorer version. Successful exploitation can result in arbitrary code execution or denial of service through memory corruption.
Is this limited to denial of service?
No. The vulnerability can allow arbitrary code execution as well as denial of service, with impacts to confidentiality, integrity, and availability.