CVE-2014-2784: Buffer Overflow

Published Aug 12, 2014

Updated

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4051.

Affected Software

4 affected components

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Aug 12, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

Which Internet Explorer versions are affected?

Microsoft Internet Explorer versions 8 through 11 are affected.

What does an attacker need to do to exploit this issue?

An attacker needs to persuade a target to visit a crafted web site. The vulnerability can then be used remotely without authentication.

What could exploitation allow?

Successful exploitation could allow arbitrary code execution or a denial of service caused by memory corruption. The reported impact includes compromise of confidentiality, integrity, and availability.

CVE-2014-2784: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Which Internet Explorer versions are affected?

What does an attacker need to do to exploit this issue?

What could exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Which Internet Explorer versions are affected?

What does an attacker need to do to exploit this issue?

What could exploitation allow?