CVE

Id
69071  
CVE No.
CVE-2014-1776  
Status
Candidate  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to the CMarkup::IsConnectedToPrimaryMarkup function, as exploited in the wild in April 2014. NOTE: this issue originally emphasized VGX.DLL, but Microsoft clarified that "VGX.DLL does not contain the vulnerable code leveraged in this exploit. Disabling VGX.DLL is an exploit-specific workaround that provides an immediate, effective workaround to help block known attacks."  
Phase
Assigned (20140129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664122 69071 CVE-2014-1776 MISC:http://www.fireeye.com/blog/uncategorized/2014/04/new-zero-day-exploit-targeting-internet-explorer-versions-9-through-11-identified-in-targeted-attacks.html  View
664123 69071 CVE-2014-1776 MISC:http://www.signalsec.com/cve-2014-1776-ie-0day-analysis/  View
664124 69071 CVE-2014-1776 CONFIRM:https://technet.microsoft.com/library/security/2963983  View
664125 69071 CVE-2014-1776 CONFIRM:http://blogs.technet.com/b/srd/archive/2014/04/30/protection-strategies-for-the-security-advisory-2963983-ie-0day.aspx  View
664126 69071 CVE-2014-1776 MS:MS14-021  View
664127 69071 CVE-2014-1776 URL:http://technet.microsoft.com/security/bulletin/MS14-021  View
664128 69071 CVE-2014-1776 CERT-VN:VU#222929  View
664129 69071 CVE-2014-1776 URL:http://www.kb.cert.org/vuls/id/222929  View
664130 69071 CVE-2014-1776 BID:67075  View
664131 69071 CVE-2014-1776 URL:http://www.securityfocus.com/bid/67075  View
664132 69071 CVE-2014-1776 OSVDB:106311  View
664133 69071 CVE-2014-1776 URL:http://www.osvdb.org/106311  View
664134 69071 CVE-2014-1776 SECTRACK:1030154  View
664135 69071 CVE-2014-1776 URL:http://securitytracker.com/id?1030154  View
664136 69071 CVE-2014-1776 SECUNIA:57908  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13992 JVNDB-2014-002867 Microsoft Internet Explorer 9 から 11 における任意のコードを実行される脆弱性 Microsoft Internet Explorer 9 から 11 には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2014-1784 69071 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002867.html  View