CVE-2014-4101

Consolidated from the connected advisories, Microsoft Internet Explorer 11 contains multiple memory‑corruption and use‑after‑free flaws that allow remote code execution when a user visits a crafted page. ZDI advisories detail issues such as: uninitialized CAttrValue handling, Tree::SComputedStyle...

CVE-2014-4085

CVE-2014-4085 maps to a Microsoft Internet Explorer memory corruption vulnerability. The connected documents describe multiple IE use-after-free remote code execution advisories (ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-313, -14-314, -14-317, etc.), each detailing fla...

CVE-2014-4098

CVE-2014-4098 corresponds to a memory corruption/remote-code-execution vulnerability in Microsoft Internet Explorer 8–11. The Connected documents identify use-after-free flaws in IE components that can be triggered via crafted web content, with several specific sub-vulnerabilities tied to in-memo...

CVE-2014-4090

Microsoft Internet Explorer 6–11 is affected by CVE-2014-4090 via memory corruption caused by use-after-free flaws in IE, allowing remote code execution (or memory corruption leading to DoS) when a user visits a crafted page. The connected ZDI advisories for the same era describe multiple use-aft...

CVE-2014-4102

Microsoft Internet Explorer 10 and 11 memory-corruption vulnerability (CVE-2014-4102) allows remote code execution or DoS via a crafted web site. Affected: IE 10/11. Underlying issue: memory corruption when processing crafted content. This CVE is distinct from CVE-2014-4080, CVE-2014-4089, and CV...

CVE-2014-4094

Microsoft Internet Explorer (versions 6–11) contains a memory corruption/Use‑After‑Free class of vulnerabilities that allow remote code execution when a user visits a crafted page. Connected advisories describe multiple IE flaws (e.g., CAttrArray, CFieldSetLayout, CTableCell, CDataBindTask, CMark...

CVE-2014-4084

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4093...

CVE-2014-4085

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4101

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4087, CVE-2014-4095, and CVE-2014-4096...

CVE-2014-4092

Microsoft Internet Explorer 8–11 contains multiple use-after-free memory corruption vulnerabilities (CTableCell, CTableOMRowCache, CGeneratedTreeNode) that can lead to remote code execution. Exploitation requires visiting a crafted or malicious page/file; attacker-controlled in-memory objects can...

CVE-2014-2799

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4059, CVE-2014-4065, CVE-2014-4079,...

CVE-2014-4079

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4081

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4088

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4090

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4097

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4100

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4109

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065,...

CVE-2014-4080

Affected software: Microsoft Internet Explorer 10 and 11. Vulnerability class: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause (per documents): memory corruption vulnerability in IE. Impact details provided: remote attackers may execute a...

CVE-2014-4083

CVE-2014-4083 maps to a Microsoft Internet Explorer memory‑corruption vulnerability with remote code execution risk. The connected ZDI advisories describe multiple IE Use‑After‑Free flaws (CAttrArray, CFieldSetLayout, CTableCell, CDataBindTask, CMarkup, etc.) that can be triggered by visiting a m...