CVE-2014-0322: Microsoft Internet Explorer Use-After-Free Vulnerability
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.
Other sources
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute code.
— CISA
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0322?
CVE-2014-0322 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2014-0322?
To fix CVE-2014-0322, users should apply the security updates provided by Microsoft for Internet Explorer 9 and 10.
Which versions of Internet Explorer are affected by CVE-2014-0322?
CVE-2014-0322 affects Internet Explorer versions 9 and 10.
What types of attacks may exploit CVE-2014-0322?
CVE-2014-0322 can be exploited through crafted JavaScript code that triggers the use-after-free vulnerability.
Is there a workaround for CVE-2014-0322 if I cannot update?
While there are no official workarounds, users are advised to limit the use of Internet Explorer 9 and 10 or switch to a different browser temporarily.