CVE-2014-1765: Use After Free
Published Apr 27, 2014
·Updated
Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.
Affected Software
6 affected components
Microsoft Internet Explorer=6
Microsoft Internet Explorer=7
Microsoft Internet Explorer=8
Microsoft Internet Explorer=9
Microsoft Internet Explorer=10
Microsoft Internet Explorer=11
Event History
Apr 27, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1765?
CVE-2014-1765 has a critical severity rating as it allows remote attackers to execute arbitrary code.
2
What versions of Internet Explorer are affected by CVE-2014-1765?
CVE-2014-1765 affects Microsoft Internet Explorer versions 6 through 11.
3
How do I fix CVE-2014-1765?
To mitigate CVE-2014-1765, users should upgrade to the latest version of Internet Explorer or apply any available security patches.
4
What type of vulnerability is CVE-2014-1765?
CVE-2014-1765 is a use-after-free vulnerability that can lead to code execution.
5
Can CVE-2014-1765 be exploited remotely?
Yes, CVE-2014-1765 can be exploited remotely by attackers through web content.