CVE-2014-0322

critical-risk
Published 2014-02-14

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.

Do I need to act?

!
93.2% chance of exploitation in next 30 days
EPSS score — higher than 7% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
2 public exploits available
32904, 32851
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Microsoft

References (23)

Broken Link http://community.websense.com/blogs/securitylabs/archive/2014/02/13/msie-0-day-e...
Patch http://technet.microsoft.com/security/advisory/2934088
Press/Media Coverage http://twitter.com/nanoc0re/statuses/434251658344673281
Exploit http://www.exploit-db.com/exploits/32851
Exploit http://www.exploit-db.com/exploits/32904
Broken Link http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/new-ie-zero-day-fou...
Broken Link http://www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-ac...
Third Party Advisory http://www.kb.cert.org/vuls/id/732479
Broken Link http://www.osvdb.org/103354
Patch https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-01...
Broken Link https://www.dropbox.com/s/pyxjgycmudirbqe/CVE-2014-0322.zip
Broken Link http://community.websense.com/blogs/securitylabs/archive/2014/02/13/msie-0-day-e...
Patch http://technet.microsoft.com/security/advisory/2934088
Press/Media Coverage http://twitter.com/nanoc0re/statuses/434251658344673281
Exploit http://www.exploit-db.com/exploits/32851
Exploit http://www.exploit-db.com/exploits/32904
Broken Link http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/new-ie-zero-day-fou...
Broken Link http://www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-ac...
Third Party Advisory http://www.kb.cert.org/vuls/id/732479
Broken Link http://www.osvdb.org/103354
and 3 more references
71
/ 100
critical-risk
Severity 30/34 · Critical
Exploitability 34/34 · Critical
Exposure 7/34 · Low