Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2014-0322)
Publish Date: 21 luglio 2015
Gravità: : Critico
Identificatori CVE: CVE-2014-0322
Data notifica: 21 luglio 2015
Descrizione
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.
Informazioni esposizione:
Apply associated Trend Micro DPI Rules.
Soluzioni
Trend Micro Deep Security DPI Rule Number: 1005908
Trend Micro Deep Security DPI Rule Name: 1005908 - Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2014-0322)
Software e versione interessati:
- microsoft internet_explorer 10