Gravedad: Crítico
  Identificadores de CVE : 2014-1772,MS14-035
  Fecha recomendada: 03 de septiembre de 2015

  Descripción

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.

  Revelación de la información

Vulnerability Protection in Trend Micro Deep Security protects user systems from threats that may leverage this vulnerability with the following DPI rule:

  • 1006036 - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1772)

  Soluciones

  Trend Micro Deep Security DPI Rule Name: 1006036 - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1772)

  Software y versión afectados

  • microsoft internet_explorer 10
  • microsoft internet_explorer 9

  La otra información

Root Cause Analysis of CVE-2014-1772 – An Internet Explorer Use After Free Vulnerability