CVE-2014-2789: Buffer Overflow
Published Jul 8, 2014
·Updated
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2795, CVE-2014-2798, and CVE-2014-2804.
Affected Software
4 affected components
Microsoft Internet Explorer=8
Microsoft Internet Explorer=9
Microsoft Internet Explorer=10
Microsoft Internet Explorer=11
Event History
Jul 8, 2014
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
Which systems are exposed to this issue?
Systems using Microsoft Internet Explorer versions 8 through 11 are affected when a user can be induced to visit a crafted website.
2
What does an attacker need to exploit the vulnerability?
The attacker needs to deliver or persuade a victim to access a crafted website. The listed attack vector is network-based and no authentication is required.
3
What could successful exploitation allow?
Successful exploitation can allow remote arbitrary code execution or cause a denial of service through memory corruption.