CVE-2019-1429
HIGH KEVInternet Explorer - Remote Code Execution via Scripting Engine Memory Corruption
Title source: llmExploitation Summary
CVE-2019-1429 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including Google Security Research.
AI-analyzed exploit summary This PoC exploits a use-after-free vulnerability in JScript (via Internet Explorer) by manipulating the 'arguments' object during a 'toJSON' callback, leading to a crash. The exploit demonstrates the vulnerability by forcing garbage collection while retaining a reference to a freed object.
Description
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1426, CVE-2019-1427, CVE-2019-1428.
Exploits (1)
This PoC exploits a use-after-free vulnerability in JScript (via Internet Explorer) by manipulating the 'arguments' object during a 'toJSON' callback, leading to a crash. The exploit demonstrates the vulnerability by forcing garbage collection while retaining a reference to a freed object.
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H