CVE-2014-2789: Buffer Overflow

Published Jul 8, 2014

Updated

Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2795, CVE-2014-2798, and CVE-2014-2804.

Affected Software

4 affected components

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Jul 8, 2014

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

Which systems are exposed to this issue?

Systems using Microsoft Internet Explorer versions 8 through 11 are affected when a user can be induced to visit a crafted website.

What does an attacker need to exploit the vulnerability?

The attacker needs to deliver or persuade a victim to access a crafted website. The listed attack vector is network-based and no authentication is required.

What could successful exploitation allow?

Successful exploitation can allow remote arbitrary code execution or cause a denial of service through memory corruption.

CVE-2014-2789: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit the vulnerability?

What could successful exploitation allow?