CVE-2014-4109: Buffer Overflow

Published Sep 10, 2014

Updated

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4110, and CVE-2014-4111.

Affected Software

6 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Microsoft Internet Explorer=11

Event History

Sep 10, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4109?

CVE-2014-4109 has a critical severity rating as it allows remote attackers to execute arbitrary code or cause a denial of service.

How do I fix CVE-2014-4109?

To fix CVE-2014-4109, users should apply the relevant security updates provided by Microsoft for Internet Explorer.

Which versions of Internet Explorer are affected by CVE-2014-4109?

CVE-2014-4109 affects Internet Explorer versions 6 through 11.

What types of attacks can exploit CVE-2014-4109?

CVE-2014-4109 can be exploited by remote attackers through a crafted web site to execute arbitrary code.

Is CVE-2014-4109 still a threat today?

While older browsers are still vulnerable, many modern systems have moved away from Internet Explorer, reducing the threat, but it's still important to ensure you are using updated and secure browsers.