Microsoft Internet Explorer 'display:run-in' Use-After-Free Remote Code Execution Vulnerability (CVE-2014-8967)
Data de publicação: 21 julho 2015
Schweregrad: : Medium
Data do informe: 21 julho 2015
Descrição
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequence specifying the run-in value for the display property, leading to improper CElement reference counting.
nvd: CWE-416: Use After Free
Exposição das informações
Apply associated Trend Micro DPI Rules.
Solução
Trend Micro Deep Security DPI Rule Number: 1006403