Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-1802.
AI-analyzed exploit summary This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1802) by manipulating the DOM to free a CFormElement object while still referencing it, leading to memory corruption. The exploit triggers the vulnerability via the DoClick function, causing writes to freed memory.
Description
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.
Exploits (1)
This HTML/JavaScript PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-1802) by manipulating the DOM to free a CFormElement object while still referencing it, leading to memory corruption. The exploit triggers the vulnerability via the DoClick function, causing writes to freed memory.