Severity: : Critical
  CVE Kennungen: : CVE-2014-0310,CVE-2014-1815
  Advisory Date: 16 de maja de 2014

  DESCRIPTION

This update resolves two critical vulnerabilities found in several versions of Internet Explorer browser. When successfully exploited, the vulnerabilities can allow an attacker to execute arbitrary code on the vulnerable computer. The attacker can gain the same user rights as the currently logged on user.

  INFORMATION EXPOSURE

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS14-029 CVE-2014-0310 1006034 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310) 13-May-14 YES
MS14-029 CVE-2014-1815 1006056 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1815) 13-May-14 YES

  SOLUTION

  Patch: : https://technet.microsoft.com/library/security/ms14-029

  Trend Micro Deep Security DPI Rule Number: 1006034
  Trend Micro Deep Security DPI Rule Name: Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310)

  AFFECTED SOFTWARE AND VERSION:

  • Internet Explorer 11
  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10