Vulnerability

(MS14-029) Security Update for Internet Explorer (2962482)

Publish date: May 16, 2014

CVE-2014-0310,CVE-2014-1815

SEVERITY

CRITICAL

//  ADVISORY DATE

16 MAY 2014


DESCRIPTION

This update resolves two critical vulnerabilities found in several versions of Internet Explorer browser. When successfully exploited, the vulnerabilities can allow an attacker to execute arbitrary code on the vulnerable computer. The attacker can gain the same user rights as the currently logged on user.

TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS14-029 CVE-2014-0310 1006034 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310) 13-May-14 YES
MS14-029 CVE-2014-1815 1006056 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1815) 13-May-14 YES

SOLUTION

PATCH: https://technet.microsoft.com/library/security/ms14-029

Trend Micro Deep Security DPI Rule Number: 1006034

Trend Micro Deep Security DPI Rule Name: Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310)

AFFECTED SOFTWARE AND VERSION

  • Internet Explorer 11
  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10

Featured Stories

Connect with us on