CVE-2014-1799

Microsoft Internet Explorer 6-11 - Memory Corruption

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2014-1799.

AI-analyzed exploit summary This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1799) by triggering a memory corruption in MSHTML!CInput::DoClick. The exploit frees a CFormElement object via innerHTML manipulation while retaining a reference, leading to subsequent writes to freed memory.

Description

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1779, CVE-2014-1803, and CVE-2014-2757.

Exploits (1)

exploitdb WORKING POC

htmldoswindows_x86

https://www.exploit-db.com/exploits/34010

View Code ZIP pw:eip

This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1799) by triggering a memory corruption in MSHTML!CInput::DoClick. The exploit frees a CFormElement object via innerHTML manipulation while retaining a reference, leading to subsequent writes to freed memory.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Microsoft Internet Explorer 9, 10

No auth needed

Prerequisites: Victim must visit a malicious webpage using Internet Explorer 9 or 10

MITRE ATT&CK

T1189 - Drive-by Compromise T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030370

Various Sources third-party-advisory x_refsource_idefense

https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1088

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/67891

Scores

EPSS 0.5047

EPSS Percentile 97.9%

Details

CWE

CWE-119

Status published

Products (6)

microsoft/internet_explorer 6

microsoft/internet_explorer 7

microsoft/internet_explorer 8

microsoft/internet_explorer 9

microsoft/internet_explorer 10

microsoft/internet_explorer 11

Published Jun 11, 2014

Tracked Since Feb 18, 2026