CVE-2014-1773

CClipStack::PushClipRect 잘못된 배열 인덱싱 먼저, pageheap이 활성화된 상태에서 발생한 크래시의 콜스택부터 살펴보겠습니다: ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2 0919aba4 6be25b58 MSHTML!CDispSurface::PushClipRectInternal+0x2f...