Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1789.
AI-analyzed exploit summary This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1789). The exploit triggers memory corruption by freeing a CFormElement object via document.body.innerHTML manipulation while still referencing it in the CInput::DoClick function.
Description
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1790.
Exploits (1)
This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1789). The exploit triggers memory corruption by freeing a CFormElement object via document.body.innerHTML manipulation while still referencing it in the CInput::DoClick function.