CVEvulnerability

CVE-2014-0307

9.3 HIGH Published 2014-03-12 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-03-12
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-119, CWE-416

Description

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."

Affected configurations

• microsoft internet explorer 9

Weakness · CWE (2)

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
CWE-416 Use After Free weakness

References

http://www.exploit-db.com/exploits/32438 Exploit
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012 docs.microsoft.com
http://www.exploit-db.com/exploits/32438 Exploit
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012 docs.microsoft.com

CVE-2014-0307

Description

Affected configurations

Related

Weakness · CWE (2)

References