Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1783.
AI-analyzed exploit summary This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1783) by manipulating the CFormElement object via the DoClick function, leading to memory corruption. The exploit triggers the vulnerability by freeing the CFormElement object and then writing to the freed memory.
Description
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
Exploits (1)
This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1783) by manipulating the CFormElement object via the DoClick function, leading to memory corruption. The exploit triggers the vulnerability by freeing the CFormElement object and then writing to the freed memory.