Exploitation Summary
EIP tracks 3 public exploits for CVE-2014-0282. PoCs published by Drozdova Liudmila, Charmve.
AI-analyzed exploit summary This is a proof-of-concept exploit for CVE-2014-0282, targeting a use-after-free vulnerability in Internet Explorer 8, 9, and 10. The exploit manipulates form elements and triggers a crash via a race condition during form reset.
Description
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1775, CVE-2014-1779, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.
Exploits (3)
This is a proof-of-concept exploit for CVE-2014-0282, targeting a use-after-free vulnerability in Internet Explorer 8, 9, and 10. The exploit manipulates form elements and triggers a crash via a race condition during form reset.
This repository contains a proof-of-concept for CVE-2014-0282, demonstrating exploit delivery via steganography and polyglots. It includes tools to encode exploit code into JPG/PNG images and generate HTML+Image polyglots for browser-based exploitation.
This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-0282) by triggering a memory corruption in MSHTML!CInput::DoClick. The exploit frees a CFormElement object via innerHTML manipulation while retaining a reference, leading to writes to freed memory.