MS Advisory (2963983) Vulnerability in Internet Explorer Could Allow Remote Code Execution
Severity: CRITICAL
CVE Identifier: CVE-2014-1776
Advisory Date: APR 26, 2014
DESCRIPTION
This Microsoft security advisory reports a vulnerability in Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11.
The vulnerability is a remote code execution vulnerability. The vulnerability exists in the way that Internet Explorer accesses an object in memory that has been deleted or has not been properly allocated. The vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. An attacker could host a specially crafted website that is designed to exploit this vulnerability through Internet Explorer and then convince a user to view the website.
SOLUTION
PATCH: https://technet.microsoft.com/library/security/2963983
Trend Micro Deep Security DPI Rule Number: 1006045
Trend Micro Deep Security DPI Rule Name: 1006045 - Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2014-1776) - 1
AFFECTED SOFTWARE AND VERSION
- Windows Server 2003 Service Pack 2 (Internet Explorer 6)
- Windows Server 2003 Service Pack 2 (Internet Explorer 7)
- Windows Server 2003 x64 Edition Service Pack 2 (Internet Explorer 6)
- Windows Server 2003 x64 Edition Service Pack 2 (Internet Explorer 7)
- Windows Server 2003 x64 Edition Service Pack 2 (Internet Explorer 8)
- Windows Vista Service Pack 2 (Internet Explorer 9)
- Windows Vista x64 Edition Service Pack 2 (Internet Explorer 7)
- Windows Vista x64 Edition Service Pack 2 (Internet Explorer 8)
- Windows Vista x64 Edition Service Pack 2 (Internet Explorer 9)
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Internet Explorer 7)
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Internet Explorer 8)
- Windows Server 2008 for 32-bit Systems Service Pack 2 (Internet Explorer 9)
- Windows Server 2008 for x64-based Systems Service Pack 2 (Internet Explorer 7)
- Windows Server 2008 for Itanium-based Systems Service Pack 2 (Internet Explorer 7)
- Windows 7 for x64-based Systems Service Pack 1 (Internet Explorer 9)
- Windows 8 for 32-bit Systems (Internet Explorer 10)
- Windows 8 for x64-based Systems (Internet Explorer 10)
- Windows Server 2012 (Internet Explorer 10)
- Windows RT (Internet Explorer 10)
- Windows 8.1 for 32-bit Systems (Internet Explorer 11)
- Windows Server 2003 Service Pack 2 (Internet Explorer 8)
- Windows Server 2003 with SP2 for Itanium-based Systems (Internet Explorer 6)
- Windows Server 2003 with SP2 for Itanium-based Systems (Internet Explorer 7)
- Windows Vista Service Pack 2 (Internet Explorer 7)
- Windows Vista Service Pack 2 (Internet Explorer 8)
- Windows Server 2008 for x64-based Systems Service Pack 2 (Internet Explorer 8)
- Windows Server 2008 for x64-based Systems Service Pack 2 (Internet Explorer 9)
- Windows 7 for 32-bit Systems Service Pack 1 (Internet Explorer 8)
- Windows 7 for 32-bit Systems Service Pack 1 (Internet Explorer 9)
- Windows 7 for 32-bit Systems Service Pack 1 (Internet Explorer 10)
- Windows 7 for 32-bit Systems Service Pack 1 (Internet Explorer 11)
- Windows 7 for x64-based Systems Service Pack 1 (Internet Explorer 8)
- Windows 7 for x64-based Systems Service Pack 1 (Internet Explorer 10)
- Windows 7 for x64-based Systems Service Pack 1 (Internet Explorer 11)
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Internet Explorer 8)
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Internet Explorer 9)
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Internet Explorer 10)
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Internet Explorer 11)
- Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (Internet Explorer 8)
- Windows 8.1 for x64-based Systems (Internet Explorer 11)
- Windows Server 2012 R2 (Internet Explorer 11)
- Windows RT 8.1 (Internet Explorer 11)
Featured Stories
The Mirage of AI Programming: Hallucinations and Code IntegrityThe adoption of large language models (LLMs) and Generative Pre-trained Transformers (GPTs), such as ChatGPT, by leading firms like Microsoft, Nuance, Mix and Google CCAI Insights, drives the industry towards a series of transformative changes. As the use of these new technologies becomes prevalent, it is important to understand their key behavior, advantages, and the risks they present.Read more
Open RAN: Attack of the xAppsThis article discusses two O-RAN vulnerabilities that attackers can exploit. One vulnerability stems from insufficient access control, and the other arises from faulty message handlingRead more
A Closer Exploration of Residential Proxies and CAPTCHA-Breaking ServicesThis article, the final part of a two-part series, focuses on the details of our technical findings and analyses of select residential proxies and CAPTCHA-solving services.Read more
How Residential Proxies and CAPTCHA-Solving Services Become Agents of AbuseThis article, the first of a two-part series, provides insights on how abusers and cybercriminals use residential proxies and CAPTCHA-solving services to enable bots, scrapers, and stuffers, and proposes security countermeasures for organizations.Read more