CVE-2014-2756
Microsoft Internet Explorer 10 and 11 - Remote Code Execution via Memory Corruption
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-2756.
AI-analyzed exploit summary This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-2756). The exploit triggers memory corruption by freeing a CFormElement object via JavaScript manipulation and then writing to the freed memory, demonstrating the vulnerability without causing a crash.
Description
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.
Exploits (1)
This is a functional proof-of-concept for a use-after-free vulnerability in Internet Explorer 9/10 (CVE-2014-2756). The exploit triggers memory corruption by freeing a CFormElement object via JavaScript manipulation and then writing to the freed memory, demonstrating the vulnerability without causing a crash.