CVE-2014-2807: Buffer Overflow
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2800 and CVE-2014-2809.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running Microsoft Internet Explorer versions 6 through 11 are affected. An attacker can target users remotely by getting them to visit a crafted website.
What does an attacker need to exploit it?
The vulnerability is reachable over the network and requires no authentication. Exploitation requires a crafted website and may result in arbitrary code execution or denial of service through memory corruption.
How severe is the potential impact?
Successful exploitation can compromise confidentiality, integrity, and availability. The reported severity is critical, with a CVSS vector of AV:N/AC:M/Au:N/C:C/I:C/A:C.