Gravità: : Critico
  Identificatori CVE: CVE-2014-0310,CVE-2014-1815
  Data notifica: 16 maggio 2014

  Descrizione

This update resolves two critical vulnerabilities found in several versions of Internet Explorer browser. When successfully exploited, the vulnerabilities can allow an attacker to execute arbitrary code on the vulnerable computer. The attacker can gain the same user rights as the currently logged on user.

  Informazioni esposizione:

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS14-029 CVE-2014-0310 1006034 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310) 13-May-14 YES
MS14-029 CVE-2014-1815 1006056 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1815) 13-May-14 YES

  Soluzioni

  Macchia: : https://technet.microsoft.com/library/security/ms14-029

  Trend Micro Deep Security DPI Rule Number: 1006034
  Trend Micro Deep Security DPI Rule Name: Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310)

  Software e versione interessati:

  • Internet Explorer 11
  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10