Gravedad: Crítico
  Identificadores de CVE : CVE-2014-0310,CVE-2014-1815
  Fecha recomendada: 16 de mayo de 2014

  Descripción

This update resolves two critical vulnerabilities found in several versions of Internet Explorer browser. When successfully exploited, the vulnerabilities can allow an attacker to execute arbitrary code on the vulnerable computer. The attacker can gain the same user rights as the currently logged on user.

  Revelación de la información

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

MS Bulletin ID Vulnerability ID DPI Rule Number DPI Rule Name Release Date IDF Compatibility
MS14-029 CVE-2014-0310 1006034 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310) 13-May-14 YES
MS14-029 CVE-2014-1815 1006056 Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-1815) 13-May-14 YES

  Soluciones

  Parche : https://technet.microsoft.com/library/security/ms14-029

  Trend Micro Deep Security DPI Rule Number: 1006034
  Trend Micro Deep Security DPI Rule Name: Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2014-0310)

  Software y versión afectados

  • Internet Explorer 11
  • Internet Explorer 6
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10