CVE-2014-8967 in Microsoft Internet Explorer
摘要 (英语)
Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a crafted HTML document in conjunction with a Cascading Style Sheets (CSS) token sequence specifying the run-in value for the display property, leading to improper CElement reference counting.
预定
2014-11-18
披露
2014-12-15
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 68354 | Microsoft Internet Explorer CSS 内存损坏 | 416 | 未经证实 | Unavailable | CVE-2014-8967 |