CVE-2014-1771: Medium severity Microsoft Internet Explorer vulnerability
SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack," aka "TLS Server Certificate Renegotiation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1771?
CVE-2014-1771 has a severity rating of important, indicating significant security risks if exploited.
How do I fix CVE-2014-1771?
To fix CVE-2014-1771, users should install the security updates provided by Microsoft for Internet Explorer versions 6 through 11.
Who is affected by CVE-2014-1771?
CVE-2014-1771 affects users of Microsoft Internet Explorer versions 6, 7, 8, 9, 10, and 11.
What type of attack does CVE-2014-1771 enable?
CVE-2014-1771 enables man-in-the-middle attacks through a method known as a triple handshake attack.
What are the consequences of not addressing CVE-2014-1771?
Failure to address CVE-2014-1771 can lead to the exposure of sensitive information and the potential modification of TLS session data.