Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-2777.
AI-analyzed exploit summary This PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 by triggering a race condition where a CFormElement object is freed but later accessed, leading to memory corruption. The exploit manipulates the DOM to force a stale pointer dereference in MSHTML!CInput::DoClick.
Description
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2014-1778.
Exploits (1)
This PoC demonstrates a use-after-free vulnerability in Internet Explorer 9/10 by triggering a race condition where a CFormElement object is freed but later accessed, leading to memory corruption. The exploit manipulates the DOM to force a stale pointer dereference in MSHTML!CInput::DoClick.