CVE-2014-0303: Buffer Overflow

Published Mar 12, 2014

Updated

Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0302.

Affected Software

3 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Event History

Mar 12, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0303?

CVE-2014-0303 is rated as critical, allowing for remote code execution or denial of service.

How do I fix CVE-2014-0303?

To mitigate CVE-2014-0303, users should upgrade to the latest version of Internet Explorer or apply the security patch provided by Microsoft.

Which versions of Internet Explorer are affected by CVE-2014-0303?

CVE-2014-0303 affects Internet Explorer versions 6, 7, and 8.

What type of attack does CVE-2014-0303 allow?

CVE-2014-0303 allows remote attackers to execute arbitrary code or cause a denial of service through crafted web pages.

Is CVE-2014-0303 a unique vulnerability?

Yes, CVE-2014-0303 is different from CVE-2014-0302, although both pertain to vulnerabilities in Internet Explorer.