Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-1785. PoCs published by Skylined.
AI-analyzed exploit summary This exploit demonstrates a use-after-free vulnerability in Microsoft Internet Explorer 11 by manipulating memory allocation and deallocation via JavaScript. It uses heap spraying techniques to control freed memory and potentially achieve remote code execution.
Description
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.
Exploits (2)
This exploit demonstrates a use-after-free vulnerability in Microsoft Internet Explorer 11 by manipulating memory allocation and deallocation via JavaScript. It uses heap spraying techniques to control freed memory and potentially achieve remote code execution.
This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9 and 10, where a freed CFormElement object is accessed, leading to memory corruption. The exploit triggers the vulnerability by manipulating the DOM and forcing a click event on an input element after its parent form is removed.