Description
Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
References
- MS14-037 vendor-advisory
- http://www.pwn2own.com/2014/03/pwn2own-results-for-wednesday-day-one/
- 20140716 VUPEN Security Research - Microsoft Internet Explorer CSS @import Memory Corruption (Pwn2Own 2014) mailing-list
- 59775 third-party-advisory
- http://twitter.com/thezdi/statuses/443855973673754624
- 1030532 vdb-entry