Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-1743 State: PUBLISHED Published: 2014-05-21T10:00:00 Last Updated: 2024-08-06T09:50:11.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - ht
.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - https://code.google.com/p/chromium/issues/detail?id=356653 - http://secunia.com/advisories/58920 - https://src.chromium.org/viewvc/blink?revision=170702&view=revision - http://www.securitytracker.com/id/1030270
CVE ID: CVE-2014-1744 State: PUBLISHED Published: 2014-05-21T10:00:00 Last Updated: 2024-08-06T09:50:11.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large shared-memory allocation. Additional Analyst Notes: - CVE Program Container: References: - https://src.chromium.org/viewvc/chrome?revision=261549&view=revision - https://code.google.com/p/chromium/issues/detail?id=359454 - htt
omium.org/viewvc/chrome?revision=261549&view=revision - https://code.google.com/p/chromium/issues/detail?id=359454 - http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://secunia.com/advisories/58920 - http://www.securitytracker.com/id/1030270
CVE ID: CVE-2014-1745 State: PUBLISHED Published: 2014-05-21T00:00:00.000Z Last Updated: 2025-06-04T15:41:27.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20
http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - https://code.google.com/p/chromium/issues/detail?id=346192 - https://src.chromium.org/viewvc/blink?revision=167993&view=revision - http://secunia.com/advisories/58920 - http://www.securitytracker.com/id/1030270 - http://www.openwall.com/lists/oss-security/2024/02/05/8
CVE ID: CVE-2014-1746 State: PUBLISHED Published: 2014-05-21T10:00:00 Last Updated: 2024-08-06T09:50:11.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=364065 - https://src.chromium.org/viewvc/chrome?revision=267280&view=revision - http://www.debian.org/security/201
il?id=364065 - https://src.chromium.org/viewvc/chrome?revision=267280&view=revision - http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://secunia.com/advisories/58920 - http://www.securitytracker.com/id/1030270
CVE ID: CVE-2014-1747 State: PUBLISHED Published: 2014-05-21T10:00:00 Last Updated: 2024-08-06T09:50:11.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka "Universal XSS (UXSS)." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-2
http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - https://src.chromium.org/viewvc/blink?revision=169499&view=revision - http://secunia.com/advisories/59155 - http://secunia.com/advisories/58920 - http://www.securitytracker.com/id/1030270 - https://code.google.com/p/chromium/issues/detail?id=330663
CVE ID: CVE-2014-1748 State: PUBLISHED Published: 2014-05-21T10:00:00 Last Updated: 2024-08-06T09:50:11.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame. Additional Analyst Notes: - CVE Program Container: References: - https://code.google.com/p/chromium/issues/detail?id=331168 - http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://s
eases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://secunia.com/advisories/60372 - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://support.apple.com/kb/HT6596 - http://lists.apple.com/archives/security-announce/2014/Dec/msg00000.html - http://secunia.com/advisories/58920 - http://www.securitytracker.com/id/1030270 - https://src.chromium.org/viewvc/blink?revision=170625&view=revision - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2014-1749 State: PUBLISHED Published: 2014-05-21T10:00:00 Last Updated: 2024-08-06T09:50:11.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 35.0.1916.114 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2014/dsa-2939 - http://googlechromereleases.blogspot.com/2014/05/stable-channel-update_20.html - http://security.gentoo.org/glsa/glsa-201408-16.xml - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://sec
ml - http://lists.opensuse.org/opensuse-updates/2014-06/msg00023.html - http://secunia.com/advisories/59155 - http://secunia.com/advisories/58920 - https://code.google.com/p/chromium/issues/detail?id=374649 - http://www.securitytracker.com/id/1030270
CVE ID: CVE-2014-1750 State: PUBLISHED Published: 2015-07-01T14:00:00 Last Updated: 2024-08-06T09:50:11.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in nokia-mapsplaces.php in the Nokia Maps & Places plugin 1.6.6 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the href parameter to page/place.html. NOTE: this was originally reported as a cross-site scripting (XSS) vulnerability, but this may be inaccurate. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/oss-sec/2014/q1/181 - https://plugins.trac.wordpress.org/browser/nokia-mapsplaces/tru
References: - http://seclists.org/oss-sec/2014/q1/181 - https://plugins.trac.wordpress.org/browser/nokia-mapsplaces/trunk/nokia-mapsplaces.php?rev=842384 - http://www.securityfocus.com/bid/65226 - https://plugins.trac.wordpress.org/browser/nokia-mapsplaces/trunk/nokia-mapsplaces.php?rev=841883 - http://seclists.org/oss-sec/2014/q1/173
CVE ID: CVE-2014-1751 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0235 and CVE-2014-1755. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-018
CVE ID: CVE-2014-1752 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-018
CVE ID: CVE-2014-1753 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-018
CVE ID: CVE-2014-1754 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-022 - http://www.securitytracker.com/id/1030
tps://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-022 - http://www.securitytracker.com/id/1030227 - http://www.securityfocus.com/bid/67288
CVE ID: CVE-2014-1755 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0235 and CVE-2014-1751. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-018
CVE ID: CVE-2014-1756 State: PUBLISHED Published: 2014-05-14T10:00:00 Last Updated: 2024-08-06T09:50:11.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka "Microsoft Office Chinese Grammar Checking Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms1
tes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-023
CVE ID: CVE-2014-1757 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary (aka .doc) format to a newer format, which allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office File Format Converter Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 - http://www.kb.cert.org/vuls/id/882841
CVE ID: CVE-2014-1758 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Word Stack Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017
CVE ID: CVE-2014-1759 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka "Arbitrary Pointer Dereference Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-020
CVE ID: CVE-2014-1760 State: PUBLISHED Published: 2014-04-08T21:00:00 Last Updated: 2024-08-06T09:50:11.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-018
CVE ID: CVE-2014-1761 State: PUBLISHED Published: 2014-03-24T19:00:00.000Z Last Updated: 2025-10-22T00:05:38.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data, as exploited in the wild in March 2014. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
d in the wild in March 2014. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-017 - http://technet.microsoft.com/security/advisory/2953095
CVE ID: CVE-2014-1762 State: PUBLISHED Published: 2014-04-27T10:00:00 Last Updated: 2024-08-06T09:50:11.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrity privileges and bypass a sandbox protection mechanism via unknown vectors, as demonstrated by ZDI during a Pwn4Fun competition at CanSecWest 2014. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67511 - http://www.securitytracker.com/id/1030370 - http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ - https://docs.microsoft
ytracker.com/id/1030370 - http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://twitter.com/thezdi/statuses/443810610958958592
CVE ID: CVE-2014-1763 State: PUBLISHED Published: 2014-04-27T10:00:00 Last Updated: 2024-08-06T09:50:11.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-037 - http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ - http://www.securityfocus.com/archive/1/532797/1
http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ - http://www.securityfocus.com/archive/1/532797/100/0/threaded - http://secunia.com/advisories/59775 - http://twitter.com/thezdi/statuses/443855973673754624 - http://www.securitytracker.com/id/1030532
CVE ID: CVE-2014-1764 State: PUBLISHED Published: 2014-04-27T10:00:00 Last Updated: 2024-08-06T09:50:11.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging "object confusion" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1030370 - http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/ - http://www.securityfocus.com/archive/1/532798/100/0/threaded - https://docs.microsoft.com/
ults-for-wednesday-day-one/ - http://www.securityfocus.com/archive/1/532798/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://twitter.com/thezdi/statuses/443855973673754624 - http://www.securityfocus.com/bid/67295
CVE ID: CVE-2014-1765 State: PUBLISHED Published: 2014-04-27T10:00:00 Last Updated: 2024-08-06T09:50:11.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014. Additional Analyst Notes: - CVE Program Container: References: - http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/ - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-037 - http://twitter.com/thezdi/statuses/444216845734666240
soft.com/en-us/security-updates/securitybulletins/2014/ms14-037 - http://twitter.com/thezdi/statuses/444216845734666240 - http://secunia.com/advisories/59775 - http://www.securitytracker.com/id/1030532
CVE ID: CVE-2014-1766 State: PUBLISHED Published: 2014-04-27T10:00:00 Last Updated: 2024-08-06T09:50:11.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014. NOTE: the original disclosure referred to triggering a kernel bug with the Internet Explorer exploit payload, but this ID is not for a kernel vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.pwn2own.com/2014/03/pwn2own-res
lnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/ - http://www.securitytracker.com/id/1030370 - http://twitter.com/thezdi/statuses/444216845734666240 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035 - http://www.securityfocus.com/bid/67518
CVE ID: CVE-2014-1767 State: PUBLISHED Published: 2014-07-08T22:00:00 Last Updated: 2024-08-06T09:50:11.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/sec
ge Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-040 - http://www.zerodayinitiative.com/advisories/ZDI-14-220/ - http://www.securityfocus.com/bid/68394 - https://www.exploit-db.com/exploits/39525/ - http://secunia.com/advisories/59778 - https://www.exploit-db.com/exploits/39446/
CVE ID: CVE-2014-1768 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2014-1769 State: PUBLISHED Published: 2014-06-11T01:00:00 Last Updated: 2024-08-06T09:50:11.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/67863 - http://www.securitytracker.com/id/1030370 - https://docs.mic
ner: References: - http://www.securityfocus.com/bid/67863 - http://www.securitytracker.com/id/1030370 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-035
CVE ID: CVE-2014-1770 State: PUBLISHED Published: 2014-05-22T10:00:00 Last Updated: 2024-08-06T09:50:11.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage function call on a CMarkup object allocated by the CMarkup::CreateInitialMarkup function. Additional Analyst Notes: - CVE Program Container: References: - http://zerodayinitiative.com/advisories/ZDI-14-140/ - http://www.securitytracker.com/id/1030266 - http://www.kb.cert.org/vuls/id/239151 - https://www.corelan.be/index.php/2014/05