CVE-2014-4134: Input Validation

Published Oct 15, 2014

Updated

Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Affected Software

3 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Event History

Oct 15, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4134?

CVE-2014-4134 is considered critical due to its ability to allow remote code execution and memory corruption.

How do I fix CVE-2014-4134?

To mitigate CVE-2014-4134, upgrade to a supported version of Internet Explorer or apply the relevant security patches provided by Microsoft.

What versions of Internet Explorer are affected by CVE-2014-4134?

CVE-2014-4134 affects Internet Explorer versions 6, 7, and 8.

What type of attack does CVE-2014-4134 enable?

CVE-2014-4134 enables attackers to execute arbitrary code or cause a denial of service through memory corruption.

How can CVE-2014-4134 be exploited?

CVE-2014-4134 can be exploited by visiting a specially crafted website that triggers the memory corruption vulnerability.