Actively exploited · Published Feb 14, 2014 · Assigned by microsoft
CVE-2014-0322
High 8.8 Exploited
In plain English
A high-severity use-after-free in Internet Explorer from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on May 4, 2022). The chance it is exploited in the next 30 days is estimated at 85.1% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by May 25, 2022.
Official description
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.
Affected products (as reported)
Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/new-ie-zero-day-found-in-watering-hole-attack-2.html x_refsource_MISC
- 103354 vdb-entry, x_refsource_OSVDB
- 32851 exploit, x_refsource_EXPLOIT-DB
- http://technet.microsoft.com/security/advisory/2934088 x_refsource_CONFIRM
- MS14-012 vendor-advisory, x_refsource_MS
- VU#732479 third-party-advisory, x_refsource_CERT-VN
- http://twitter.com/nanoc0re/statuses/434251658344673281 x_refsource_MISC
- http://community.websense.com/blogs/securitylabs/archive/2014/02/13/msie-0-day-exploit-cve-2014-0322-possibly-targeting-french-aerospace-organization.aspx x_refsource_MISC
- https://www.dropbox.com/s/pyxjgycmudirbqe/CVE-2014-0322.zip x_refsource_MISC
- http://www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html x_refsource_MISC
- 32904 exploit, x_refsource_EXPLOIT-DB
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0322 government-resource