PT-2014-1568 · Microsoft · Internet Explorer

Jason Kratzer + 1 · Publicado 2014-10-14 · Atualizado 2018-10-12 · CVE-2014-4128

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 11

Description The issue is related to improper access to objects in memory, which could lead to memory corruption. This allows remote attackers to execute arbitrary code or cause a denial of service in the context of the current user. The vulnerability exists due to the way Internet Explorer handles memory, potentially enabling an attacker to execute arbitrary code.

Recommendations For Microsoft Internet Explorer versions 6 through 11, update to a newer version to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to potentially malicious websites to minimize the risk of triggering the memory corruption issue.

Correção

RCE

DoS

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-00504

CVE-2014-4128

Produtos afetados

Internet Explorer

Referências · 9

• http://technet.microsoft.com/en-us/security/bulletin/ms14-056 · Nota
• http://secunia.com/advisories/60968 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-4128 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4128 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00504 · Nota de Segurança
• http://securityfocus.com/bid/70330 · Nota
• https://verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1076 · Nota
• http://securitytracker.com/id/1031018 · Nota