Lucene search

K
zdiGarage4HackersZDI-14-406
HistoryDec 09, 2014 - 12:00 a.m.

Microsoft Internet Explorer LineBoxBuilder::FindWord Out-Of-Bounds Memory Access Vulnerability

2014-12-0900:00:00
Garage4Hackers
www.zerodayinitiative.com
19

0.514 Medium

EPSS

Percentile

97.6%

This vulnerability consists of potentially hazardous use of memory on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how Internet Explorer performs hyphenation of text on web pages. By presenting a specially formed web page to the browser, an attacker can cause Internet Explorer to access memory past the end of a buffer. This may give an attacker the ability to improperly influence the behavior of the browser.