18 FEB 2014
A remote code execution vulnerability exists in the way Internet Explorer 9 and 10 handles an object that has been deleted in memory. When successfully exploited, it may allow a remote attacker to execute code of choice on the vulnerable computer. Note that this vulnerability affects Internet Explorer 9 installed on the following operating systems:
It also affects Internet Explorer 10 installed on the following operating systems:
Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.
Trend Micro Deep Security DPI Rule Number: 1005909
Trend Micro Deep Security DPI Rule Name: 1005909 - Microsoft Internet Explorer Remote Code Execution Vulnerability (CVE-2014-0322) - 2