Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1772.
AI-analyzed exploit summary This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9 and 10, where a freed CFormElement object is accessed, leading to memory corruption. The exploit triggers the vulnerability by manipulating the DOM and forcing a click event on an input element after freeing its associated form.
Description
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.
Exploits (1)
This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9 and 10, where a freed CFormElement object is accessed, leading to memory corruption. The exploit triggers the vulnerability by manipulating the DOM and forcing a click event on an input element after freeing its associated form.