CVE

Id
69058  
CVE No.
CVE-2014-1763  
Status
Candidate  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.  
Phase
Assigned (20140129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664044 69058 CVE-2014-1763 BUGTRAQ:20140716 VUPEN Security Research - Microsoft Internet Explorer CSS @import Memory Corruption (Pwn2Own 2014)  View
664045 69058 CVE-2014-1763 URL:http://www.securityfocus.com/archive/1/archive/1/532797/100/0/threaded  View
664046 69058 CVE-2014-1763 MISC:http://twitter.com/thezdi/statuses/443855973673754624  View
664047 69058 CVE-2014-1763 MISC:http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/  View
664048 69058 CVE-2014-1763 MS:MS14-037  View
664049 69058 CVE-2014-1763 URL:http://technet.microsoft.com/security/bulletin/MS14-037  View
664050 69058 CVE-2014-1763 SECTRACK:1030532  View
664051 69058 CVE-2014-1763 URL:http://www.securitytracker.com/id/1030532  View
664052 69058 CVE-2014-1763 SECUNIA:59775  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13973 JVNDB-2014-002848 Microsoft Internet Explorer 6 から 11 の SChannel における重要な情報を取得される脆弱性 Microsoft Internet Explorer 6 から 11 の SChannel には、サーバの X.509 証明書が再ネゴシエーション中に再ネゴシエーション前と同一であることを確認しないため、重要な情報を取得される、または TLS セッションデータを変更される脆弱性が存在します。 CVE-2014-1771 69058 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002848.html  View