Description
Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.
References
- http://www.pwn2own.com/2014/03/pwn2own-results-thursday-day-two/
- MS14-037 vendor-advisory
- http://twitter.com/thezdi/statuses/444216845734666240
- 59775 third-party-advisory
- 1030532 vdb-entry