CVE-2014-1771

🗓️ 11 Jun 2014 01:00:00Reported by microsoftType

CVE-2014-1771 SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a "triple handshake attack," aka "TLS Server Certificate Renegotiation Vulnerability.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the Internet Explorer browser allows attackers to gain unauthorized access to transmitted data.	5 Jul 201600:00	–	bdu_fstec
Cvelist	CVE-2014-1771	11 Jun 201401:00	–	cvelist
Microsoft KB	MS14-035: Cumulative security update for Internet Explorer: June 10, 2014	10 Jun 201400:00	–	mskb
Kaspersky	KLA10010 Multiple vulnerabilities at Microsoft Internet Explorer	10 Jun 201400:00	–	kaspersky
NVD	CVE-2014-1771	11 Jun 201404:56	–	nvd
OpenVAS	Microsoft Internet Explorer Multiple Vulnerabilities (2969262)	11 Jun 201400:00	–	openvas
Prion	Code injection	11 Jun 201404:56	–	prion
securityvulns	Microsoft Windows multiple security vulnerabilities	21 Jul 201400:00	–	securityvulns
Tenable Nessus	MS14-035: Cumulative Security Update for Internet Explorer (2969262)	11 Jun 201400:00	–	nessus
Symantec	Microsoft Internet Explorer CVE-2014-1771 Information Disclosure Vulnerability	10 Jun 201400:00	–	symantec

NVD

Node

microsoft internet_explorerMatch6

microsoft internet_explorerMatch7

microsoft internet_explorerMatch8

microsoft internet_explorerMatch9

microsoft internet_explorerMatch10

microsoft internet_explorerMatch11-

Source	Link
secure-resumption	www.secure-resumption.com/
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
securitytracker	www.securitytracker.com/id/1030370
securityfocus	www.securityfocus.com/bid/67861

06 May 2026 22:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.8

EPSS0.13423

CWE-310