Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1791.
AI-analyzed exploit summary This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 by manipulating the CFormElement object during a click event, leading to memory corruption. The exploit triggers the vulnerability by freeing the object and then accessing it, as shown in the disassembly comments.
Description
Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Exploits (1)
This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 by manipulating the CFormElement object during a click event, leading to memory corruption. The exploit triggers the vulnerability by freeing the object and then accessing it, as shown in the disassembly comments.