CVE-2014-4105: Buffer Overflow

Published Sep 10, 2014

Updated

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.

Affected Software

6 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Sep 10, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4105?

CVE-2014-4105 has a high severity level due to its potential for arbitrary code execution and memory corruption.

How do I fix CVE-2014-4105?

To fix CVE-2014-4105, install the security update provided by Microsoft for Internet Explorer.

What versions of Internet Explorer are affected by CVE-2014-4105?

CVE-2014-4105 affects Internet Explorer versions 6 through 11.

What type of attack can CVE-2014-4105 facilitate?

CVE-2014-4105 can facilitate remote attacks that result in arbitrary code execution or denial of service.

Is there any known exploit for CVE-2014-4105?

Yes, CVE-2014-4105 can be exploited through crafted web pages that trigger memory corruption.