Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1792.
AI-analyzed exploit summary This is a functional proof-of-concept exploit for CVE-2014-1792, demonstrating a use-after-free vulnerability in Internet Explorer 9 and 10. The exploit triggers memory corruption by manipulating the CFormElement object through JavaScript, leading to potential arbitrary code execution.
Description
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1781, CVE-2014-1804, and CVE-2014-2770.
Exploits (1)
This is a functional proof-of-concept exploit for CVE-2014-1792, demonstrating a use-after-free vulnerability in Internet Explorer 9 and 10. The exploit triggers memory corruption by manipulating the CFormElement object through JavaScript, leading to potential arbitrary code execution.