CVE

Id
67731  
CVE No.
CVE-2014-0322  
Status
Candidate  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.  
Phase
Assigned (20131203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
653832 67731 CVE-2014-0322 EXPLOIT-DB:32851  View
653833 67731 CVE-2014-0322 URL:http://www.exploit-db.com/exploits/32851  View
653834 67731 CVE-2014-0322 EXPLOIT-DB:32904  View
653835 67731 CVE-2014-0322 URL:http://www.exploit-db.com/exploits/32904  View
653836 67731 CVE-2014-0322 MISC:http://community.websense.com/blogs/securitylabs/archive/2014/02/13/msie-0-day-exploit-cve-2014-0322-possibly-targeting-french-aerospace-organization.aspx  View
653837 67731 CVE-2014-0322 MISC:http://twitter.com/nanoc0re/statuses/434251658344673281  View
653838 67731 CVE-2014-0322 MISC:http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/new-ie-zero-day-found-in-watering-hole-attack-2.html  View
653839 67731 CVE-2014-0322 MISC:http://www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html  View
653840 67731 CVE-2014-0322 MISC:https://www.dropbox.com/s/pyxjgycmudirbqe/CVE-2014-0322.zip  View
653841 67731 CVE-2014-0322 CONFIRM:http://technet.microsoft.com/security/advisory/2934088  View
653842 67731 CVE-2014-0322 MS:MS14-012  View
653843 67731 CVE-2014-0322 URL:http://technet.microsoft.com/security/bulletin/MS14-012  View
653844 67731 CVE-2014-0322 CERT-VN:VU#732479  View
653845 67731 CVE-2014-0322 URL:http://www.kb.cert.org/vuls/id/732479  View
653846 67731 CVE-2014-0322 OSVDB:103354  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12435 JVNDB-2014-001310 Dell KACE K1000 にクロスサイトスクリプティングの脆弱性 Dell が提供する KACE K1000 には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-0330 67731 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001310.html  View