Lucene search

K
cveMicrosoftCVE-2014-0307
HistoryMar 12, 2014 - 5:15 a.m.

CVE-2014-0307

2014-03-1205:15:19
CWE-119
CWE-416
microsoft
web.nvd.nist.gov
46
4
cve-2014-0307
microsoft
internet explorer
vulnerability
remote attackers
execute arbitrary code
denial of service
memory corruption

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.973

Percentile

99.9%

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka β€œInternet Explorer Memory Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftinternet_explorerMatch9
VendorProductVersionCPE
microsoftinternet_explorer9cpe:/a:microsoft:internet_explorer:9:::

Social References

More

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.973

Percentile

99.9%