CVE-2014-2792: Buffer Overflow

Published Jul 8, 2014

Updated

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2786 and CVE-2014-2813.

Affected Software

3 affected components

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Jul 8, 2014

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

Which Internet Explorer versions are affected?

Microsoft Internet Explorer 9 through 11 are affected.

What must an attacker do to exploit this issue?

An attacker can exploit the vulnerability remotely by using a crafted web site. No authentication is required according to the supplied CVSS vector.

What impact could successful exploitation have?

Successful exploitation can result in arbitrary code execution or a denial of service caused by memory corruption. The supplied CVSS vector indicates impacts to confidentiality, integrity, and availability.

CVE-2014-2792: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Which Internet Explorer versions are affected?

What must an attacker do to exploit this issue?

What impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which Internet Explorer versions are affected?

What must an attacker do to exploit this issue?

What impact could successful exploitation have?