CVE-2014-4137: Buffer Overflow

Published Oct 15, 2014

Updated

Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4133.

Affected Software

2 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Event History

Oct 15, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4137?

CVE-2014-4137 is rated as critical due to its potential to allow remote code execution and memory corruption.

How do I fix CVE-2014-4137?

To mitigate CVE-2014-4137, upgrade to a newer version of Internet Explorer that is not affected by this vulnerability.

Which versions of Internet Explorer are affected by CVE-2014-4137?

CVE-2014-4137 affects Internet Explorer versions 6 and 7.

What are the potential impacts of CVE-2014-4137?

The potential impacts of CVE-2014-4137 include arbitrary code execution and denial of service due to memory corruption.

Is CVE-2014-4137 being actively exploited?

At various times, CVE-2014-4137 has been reported to be actively exploited in the wild, emphasizing the need for immediate remediation.