Schweregrad: : Crítico
  Identificador(es) CVE: : CVE-2014-0310,CVE-2014-1815
  Data do informe: 16 maio 2014

  Descrição

This update resolves two critical vulnerabilities found in several versions of Internet Explorer browser. When successfully exploited, the vulnerabilities can allow an attacker to execute arbitrary code on the vulnerable computer. The attacker can gain the same user rights as the currently logged on user.

  Exposição das informações

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS14-029 CVE-2014-0310 1006034 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310) 13-May-14 YES
MS14-029 CVE-2014-1815 1006056 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1815) 13-May-14 YES

  Solução

  Alteração: : https://technet.microsoft.com/library/security/ms14-029

  Trend Micro Deep Security DPI Rule Number: 1006034
  Trend Micro Deep Security DPI Rule Name: Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310)

  Software infectado e versão:

  • Internet Explorer 11
  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10