CVE-2014-0307

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."

Score

CVSS 2.0 9.3 Critical

Status

Modified - secure@microsoft.com

Published

2014-03-12

Last modified

2024-08-06

Weaknesses

CWE-119, CWE-416

Affected products

• Internet Explorer (Microsoft)

References

• http://www.exploit-db.com/exploits/32438
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012