CVE-2014-1765

Severity

76%

Complexity

49%

Confidentiality

165%

Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.

Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.

CVSS 2.0 Base Score 7.6. CVSS Attack Vector: network. CVSS Attack Complexity: high. CVSS Vector: (AV:N/AC:H/Au:N/C:C/I:C/A:C).

Overview

Type

Microsoft Internet Explorer

First reported 10 years ago

2014-04-27 10:55:00

Last updated 6 years ago

2018-10-12 22:05:00

Affected Software

Microsoft Internet Explorer 6

6

Microsoft Internet Explorer 7

7

Microsoft Internet Explorer 8

8

Microsoft Internet Explorer 9

9

Microsoft Internet Explorer 10

10

References

59775

http://twitter.com/thezdi/statuses/444216845734666240

Press/Media Coverage

http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/

Broken Link

1030532

VDB Entry

MS14-037

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.