(0Day) Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability

🗓️ 21 May 2014 00:00:00Reported by Peter 'corelanc0d3r' Van Eeckhoutte - Corelan - www.corelan.beType

zdi🔗 www.zerodayinitiative.com👁 62 Views

Microsoft Internet Explorer CMarkup Use-After-Free Remote Code Execution Vulnerability allows remote attackers to execute arbitrary code. User interaction is mandatory to exploit this vulnerability by visiting a malicious page or opening a malicious file. The flaw exists within the handling of CMarkup objects, where allocation and free sequence occurs, granting attackers the ability to reuse a dangling pointer for code execution

Reporter	Title	Published	Views	Family All 19
ATTACKERKB	Microsoft Internet Explorer CCaret Use-After-Free	11 Sep 201300:00	–	attackerkb
BDU FSTEC	Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
Circl	CVE-2014-1770	5 Jun 201405:00	–	circl
CVE	CVE-2014-1770	22 May 201410:00	–	cve
Cvelist	CVE-2014-1770	22 May 201410:00	–	cvelist
Microsoft KB	MS14-035: Cumulative security update for Internet Explorer: June 10, 2014	10 Jun 201400:00	–	mskb
Kaspersky	KLA10010 Multiple vulnerabilities at Microsoft Internet Explorer	10 Jun 201400:00	–	kaspersky
MSRC	Advance Notification Service for the June 2014 Security Bulletin Release	5 Jun 201407:00	–	msrc
NVD	CVE-2014-1770	22 May 201411:14	–	nvd
OpenVAS	Microsoft Internet Explorer Multiple Vulnerabilities (2969262)	11 Jun 201400:00	–	openvas