CVE-2014-0290: Buffer Overflow
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0267 and CVE-2014-0289.
Affected Software
Event History
Frequently Asked Questions
Does an attacker need to authenticate to exploit this issue?
No authentication is required according to the CVSS vector (Au:N). The attack vector is network-based, although exploitation has medium attack complexity.
What does the CVSS vector indicate about the potential impact of exploitation?
The CVSS vector rates confidentiality, integrity, and availability impacts as complete (C:C/I:C/A:C). This indicates a successful exploit can have full impact across all three security properties.
What weakness category is associated with this vulnerability?
The issue is categorized as CWE Buffer Overflow. The description identifies memory corruption as the mechanism that can lead to code execution or denial of service.