CVE-2014-1815
EXPLOITED IN THE WILDMicrosoft Internet Explorer <11 - Code Injection
Title source: llmExploitation Summary
CVE-2014-1815 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit from researchers including PhysicalDrive0.
AI-analyzed exploit summary This exploit leverages a use-after-free vulnerability in Internet Explorer (CVE-2014-1815) to achieve remote code execution. It manipulates DOM elements and garbage collection to trigger the vulnerability, potentially allowing arbitrary code execution.
Description
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as exploited in the wild in May 2014, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0310.
Exploits (1)
This exploit leverages a use-after-free vulnerability in Internet Explorer (CVE-2014-1815) to achieve remote code execution. It manipulates DOM elements and garbage collection to trigger the vulnerability, potentially allowing arbitrary code execution.