Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-1773. PoCs published by day6reak.
AI-analyzed exploit summary This is a technical writeup detailing the root cause of CVE-2014-1773, an invalid array indexing vulnerability in Internet Explorer's CClipStack::PushClipRect() function. It explains the heap manipulation and crash conditions but does not include executable exploit code.
Description
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
Exploits (2)
This is a technical writeup detailing the root cause of CVE-2014-1773, an invalid array indexing vulnerability in Internet Explorer's CClipStack::PushClipRect() function. It explains the heap manipulation and crash conditions but does not include executable exploit code.
This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1773) by triggering a memory corruption in MSHTML!CInput::DoClick. The exploit frees a CFormElement object via innerHTML manipulation while retaining a reference, leading to subsequent writes to freed memory.