CVE-2014-4107: Buffer Overflow

Published Sep 10, 2014

Updated

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.

Affected Software

6 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Sep 10, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4107?

CVE-2014-4107 is considered critical due to its potential to allow remote code execution and denial of service.

How do I fix CVE-2014-4107?

To fix CVE-2014-4107, apply the security updates provided by Microsoft for Internet Explorer.

Which versions of Internet Explorer are affected by CVE-2014-4107?

CVE-2014-4107 affects Internet Explorer versions 6 through 11.

What types of attacks can CVE-2014-4107 allow?

CVE-2014-4107 can allow remote attackers to execute arbitrary code or cause a denial of service.

Is there a workaround for CVE-2014-4107?

Currently, the best approach to mitigate CVE-2014-4107 is to update to the latest version of Internet Explorer.