CVE-2014-0322
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2014-0322
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Internet Explorer 释放后重用漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Internet Explorer（IE）是美国微软（Microsoft）公司开发的一款Web浏览器，是Windows操作系统附带的默认浏览器。 Microsoft IE 10版本中存在释放后重用漏洞。远程攻击者可借助特制的JavaScript代码利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2014-0322
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-0322
请登录查看更多情报信息。
- http://twitter.com/nanoc0re/statuses/434251658344673281x_refsource_MISC
- https://www.dropbox.com/s/pyxjgycmudirbqe/CVE-2014-0322.zipx_refsource_MISC
- Microsoft Security Advisory 2934088 | Microsoft Learnx_refsource_CONFIRM
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012vendor-advisoryx_refsource_MS
- https://nvd.nist.gov/vuln/detail/CVE-2014-0322
Same Patch Batch · n/a · 2014-02-14 · 36 CVEs total
| CVE-2014-1965 | SAP NetWeaver Exchange Infrastructure 跨站脚本漏洞 | |
| CVE-2014-1921 | parcimonie 信息泄露漏洞 | |
| CVE-2014-1948 | OpenStack Image Registry and Delivery Service 安全漏洞 | |
| CVE-2014-1950 | Xen‘xc_cpupool_getinfo’函数释放后重用漏洞 | |
| CVE-2014-1960 | SAP NetWeaver Solution Manager 安全漏洞 | |
| CVE-2014-1961 | SAP NetWeaver Portal WebDynPro 安全漏洞 | |
| CVE-2014-1962 | SAP CRM Gwsync XML外部实体漏洞 | |
| CVE-2014-1963 | SAP NetWeaver Message Server 安全漏洞 | |
| CVE-2014-1964 | SAP NetWeaver Exchange Infrastructure 跨站脚本漏洞 | |
| CVE-2014-0032 | Apache Subversion‘get_resource’函数拒绝服务漏洞 | |
| CVE-2013-5014 | Symantec Endpoint Protection Manager和Symantec Protection Center 安全漏洞 | |
| CVE-2013-5015 | Symantec Endpoint Protection Manager和Symantec Protection Center SQL注入漏洞 | |
| CVE-2013-5400 | IBM Platform Symphony DE 信任管理漏洞 | |
| CVE-2013-6722 | IBM WebSphere Portal 任意文件上传漏洞 | |
| CVE-2013-6728 | IBM WebSphere Dashboard Framework 安全漏洞 | |
| CVE-2014-0855 | IBM Connections Portlets for WebSphere Portal 跨站脚本漏洞 | |
| CVE-2014-1467 | 多款BlackBerry产品信息泄露漏洞 | |
| CVE-2014-1680 | Bandisoft Bandizip 不可信搜索路径漏洞 | |
| CVE-2012-1100 | Red Hat JBoss Operations Network 授权问题漏洞 | |
| CVE-2013-5351 | IrfanView LZW代码流处理远程基于堆的缓冲区溢出漏洞 |
Showing top 20 of 36 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2014-0322
No comments yet