CVE-2014-0307: Use After Free

Published Mar 12, 2014

Updated

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."

Affected Software

1 affected component

Microsoft Internet Explorer=9

Event History

Mar 12, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0307?

CVE-2014-0307 is classified as critical due to its potential to allow remote code execution.

How do I fix CVE-2014-0307?

To fix CVE-2014-0307, users should update Microsoft Internet Explorer to the latest version available or apply the relevant security patch.

Which versions of Internet Explorer are affected by CVE-2014-0307?

CVE-2014-0307 specifically affects Microsoft Internet Explorer 9.

What type of attacks can exploit CVE-2014-0307?

CVE-2014-0307 can be exploited through remote attacks that involve manipulating a TextRange element.

What are the consequences of exploiting CVE-2014-0307?

Exploiting CVE-2014-0307 can lead to arbitrary code execution or cause a denial of service due to memory corruption.