CVE-2014-0307

Microsoft Internet Explorer 9 - Use After Free

Title source: llm

Description

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka "Internet Explorer Memory Corruption Vulnerability."

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/32438

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by Jason Kratzer, sinn3r · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms14_012_textrange.rb

View Code ZIP pw:eip

References (2)

[Exploit] http://www.exploit-db.com/exploits/32438

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012

Scores

EPSS 0.8639

EPSS Percentile 99.4%

Details

CWE

CWE-119 CWE-416

Status published

Products (1)

microsoft/internet_explorer 9

Published Mar 12, 2014

Tracked Since Feb 18, 2026