PT-2014-1568 · Microsoft · Internet Explorer

Jason Kratzer + 1 · Published 2014-10-14 · Updated 2018-10-12 · CVE-2014-4128

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 11

Description The issue is related to improper access to objects in memory, which could lead to memory corruption. This allows remote attackers to execute arbitrary code or cause a denial of service in the context of the current user. The vulnerability exists due to the way Internet Explorer handles memory, potentially enabling an attacker to execute arbitrary code.

Recommendations For Microsoft Internet Explorer versions 6 through 11, update to a newer version to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to potentially malicious websites to minimize the risk of triggering the memory corruption issue.

Fix

RCE

DoS

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2015-00504

CVE-2014-4128

Affected Products

Internet Explorer

References · 9

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4128 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4128 · Security Note
• https://bdu.fstec.ru/vul/2015-00504 · Security Note
• http://technet.microsoft.com/en-us/security/bulletin/ms14-056 · Note
• http://secunia.com/advisories/60968 · Note
• http://securityfocus.com/bid/70330 · Note
• https://verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1076 · Note
• http://securitytracker.com/id/1031018 · Note