QwikSec

Security Database

CVE

CWE

Training

CVE-2014-1770

Published: May 22, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage function call on a CMarkup object allocated by the CMarkup::CreateInitialMarkup function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://zerodayinitiative.com/advisories/ZDI-14-140/

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

third-party-advisory

x_refsource_CERT-VN

https://www.corelan.be/index.php/2014/05/22/on-cve-2014-1770-zdi-14-140-internet-explorer-8-0day/

x_refsource_MISC

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_MS

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.