CVE-2014-2801: Buffer Overflow

Published Jul 8, 2014

Updated

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Affected Software

2 affected components

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Jul 8, 2014

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

Who is exposed to this issue?

Systems running Microsoft Internet Explorer 10 or 11 are affected. Exploitation can be initiated remotely through a crafted website, so users who browse to attacker-controlled content are exposed.

Does exploitation require authentication or prior access?

No authentication is required. The supplied vector indicates network-based exploitation with no required privileges, although the attack complexity is rated medium.

What can a successful attacker do?

A successful attacker may execute arbitrary code or cause a denial of service through memory corruption. The vulnerability is rated critical with impacts to confidentiality, integrity, and availability.

CVE-2014-2801: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

Does exploitation require authentication or prior access?

What can a successful attacker do?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

Does exploitation require authentication or prior access?

What can a successful attacker do?