CVE-2014-8967

Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequence specifying the run-in value for the display property, leading to improper CElement reference counting.

Score

CVSS 2.0 6.8 Medium

Status

Modified - secure@microsoft.com

Published

2014-12-15

Last modified

2024-08-06

Affected products

• Internet Explorer (Microsoft)

References

• http://www.securityfocus.com/bid/71483
• http://zerodayinitiative.com/advisories/ZDI-14-403/