CVE-2014-1763

Severity

99%

Complexity

99%

Confidentiality

165%

Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

Microsoft Internet Explorer

First reported 10 years ago

2014-04-27 10:55:00

Last updated 6 years ago

2018-10-12 22:05:00

Affected Software

Microsoft Internet Explorer 9

9

Microsoft Internet Explorer 10

10

Microsoft Internet Explorer 11

11

References

59775

http://twitter.com/thezdi/statuses/443855973673754624

http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/

20140716 VUPEN Security Research - Microsoft Internet Explorer CSS @import Memory Corruption (Pwn2Own 2014)

1030532

MS14-037

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.