First published: Wed Mar 12 2014(Updated: )
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0297, CVE-2014-0308, and CVE-2014-0312.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =8 | |
Internet Explorer | =9 | |
Internet Explorer | =10 | |
Internet Explorer | =11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-0324 is rated as critical due to its potential for remote code execution and denial of service.
To fix CVE-2014-0324, you should apply the security update provided in Microsoft's MS14-012 bulletin.
CVE-2014-0324 affects Internet Explorer versions 8, 9, 10, and 11.
Yes, CVE-2014-0324 allows attackers to execute arbitrary code on the affected systems.
You can determine if your system is vulnerable to CVE-2014-0324 by checking if you are running an affected version of Internet Explorer without the necessary security update.