Kaspersky LabKLA10010KLA10010 Multiple vulnerabilities at Microsoft Internet Explorer
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.968 High
EPSS
Percentile
99.7%
Detect date:
06/10/2014
Severity:
Critical
Description:
Multiple serious vulnerabilities have been found in Microsoft Internet Explorer versions 6-11. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass a sandbox protection mechanism, obtain sensitive information, modify TLS session data or read local files.
Affected products:
Microsoft Internet Explorer versions from 6 to 11.
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
Microsoft bulletin
CVE-2014-1800
CVE-2014-1799
CVE-2014-1803
CVE-2014-1802
CVE-2014-1805
CVE-2014-1804
CVE-2014-2754
CVE-2014-2753
CVE-2014-2756
CVE-2014-2755
CVE-2014-2777
CVE-2014-1779
CVE-2014-1778
CVE-2014-1777
CVE-2014-1775
CVE-2014-1783
CVE-2014-1782
CVE-2014-1781
CVE-2014-1780
CVE-2014-2776
CVE-2014-2775
CVE-2014-1785
CVE-2014-1784
CVE-2014-2771
CVE-2014-2770
CVE-2014-2769
CVE-2014-2768
CVE-2014-2772
CVE-2014-2773
CVE-2014-2782
CVE-2014-2759
CVE-2014-1794
CVE-2014-1795
CVE-2014-1791
CVE-2014-1792
CVE-2014-1789
CVE-2014-1790
CVE-2014-1786
CVE-2014-1788
CVE-2014-1796
CVE-2014-1797
CVE-2014-0282
CVE-2014-1762
CVE-2014-1764
CVE-2014-1766
CVE-2014-1769
CVE-2014-1770
CVE-2014-1771
CVE-2014-1772
CVE-2014-1773
CVE-2014-2763
CVE-2014-2764
CVE-2014-2765
CVE-2014-2757
CVE-2014-2758
CVE-2014-1774
CVE-2014-2760
CVE-2014-2761
CVE-2014-2766
CVE-2014-2767
Impacts:
ACE
Related products:
CVE-IDS:
CVE-2014-18009.3Critical
CVE-2014-17999.3Critical
CVE-2014-18039.3Critical
CVE-2014-18029.3Critical
CVE-2014-18059.3Critical
CVE-2014-18049.3Critical
CVE-2014-27549.3Critical
CVE-2014-27539.3Critical
CVE-2014-27569.3Critical
CVE-2014-27559.3Critical
CVE-2014-27777.5Critical
CVE-2014-17799.3Critical
CVE-2014-17786.8High
CVE-2014-17774.3Warning
CVE-2014-17759.3Critical
CVE-2014-17839.3Critical
CVE-2014-17829.3Critical
CVE-2014-17819.3Critical
CVE-2014-17809.3Critical
CVE-2014-27769.3Critical
CVE-2014-27759.3Critical
CVE-2014-17859.3Critical
CVE-2014-17849.3Critical
CVE-2014-27719.3Critical
CVE-2014-27709.3Critical
CVE-2014-27699.3Critical
CVE-2014-27689.3Critical
CVE-2014-27729.3Critical
CVE-2014-27739.3Critical
CVE-2014-27829.3Critical
CVE-2014-27599.3Critical
CVE-2014-17949.3Critical
CVE-2014-17959.3Critical
CVE-2014-17919.3Critical
CVE-2014-17929.3Critical
CVE-2014-17899.3Critical
CVE-2014-17909.3Critical
CVE-2014-17869.3Critical
CVE-2014-17889.3Critical
CVE-2014-17969.3Critical
CVE-2014-17979.3Critical
CVE-2014-02829.3Critical
CVE-2014-17627.5Critical
CVE-2014-17669.3Critical
CVE-2014-17699.3Critical
CVE-2014-17709.3Critical
CVE-2014-17716.8High
CVE-2014-17729.3Critical
CVE-2014-17739.3Critical
CVE-2014-27639.3Critical
CVE-2014-27649.3Critical
CVE-2014-27659.3Critical
CVE-2014-27579.3Critical
CVE-2014-27589.3Critical
CVE-2014-17749.3Critical
CVE-2014-27609.3Critical
CVE-2014-27619.3Critical
CVE-2014-27669.3Critical
CVE-2014-27679.3Critical
Microsoft official advisories:
KB list:
Exploitation:
Public exploits exist for this vulnerability.
References
support.microsoft.com/kb/2957689
support.microsoft.com/kb/2963950
support.microsoft.com/kb/2969262
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0282
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1762
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1766
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1769
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1770
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1771
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1772
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1773
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1774
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1775
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1777
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1778
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1779
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1780
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1781
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1782
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1783
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1784
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1785
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1786
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1788
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1789
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1790
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1791
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1792
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1794
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1795
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1796
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1797
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1799
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1800
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1802
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1803
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1804
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1805
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2753
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2754
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2755
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2756
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2757
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2758
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2759
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2760
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2761
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2763
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2764
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2765
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2766
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2767
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2768
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2769
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2770
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2771
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2772
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2773
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2775
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2776
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2777
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2782
portal.msrc.microsoft.com/en-us/security-guidance
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-0282
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1762
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1764
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1766
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1769
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1770
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1771
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1772
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1773
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1774
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1775
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1777
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1778
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1779
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1780
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1781
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1782
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1783
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1784
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1785
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1786
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1788
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1789
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1790
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1791
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1792
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1794
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1795
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1796
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1797
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1799
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1800
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1802
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1803
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1804
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-1805
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2753
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2754
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2755
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2756
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2757
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2758
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2759
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2760
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2761
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2763
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2764
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2765
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2766
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2767
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2768
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2769
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2770
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2771
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2772
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2773
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2775
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2776
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2777
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2014-2782
statistics.securelist.com/vulnerability-scan/month
technet.microsoft.com/library/security/ms14-035
threats.kaspersky.com/en/product/Microsoft-Internet-Explorer/
Related
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.968 High
EPSS
Percentile
99.7%