Palo Alto Networks Protects Customers From Critical IE Vulnerability CVE-2014-1776
Summary: Microsoft disclosed a critical Internet Explorer vulnerability, CVE-2014-1776, affecting IE versions 6 through 11, caused by the way IE accesses an object in memory that has been deleted or not properly allocated, allowing an attacker to execute arbitrary code in the context of the current user. The flaw has been observed exploited in the wild through drive-by downloads and watering-hole attacks, with exploit code targeting IE 9, 10 and 11, and Microsoft has not stated when a patch will be available.
What's compelling: Windows XP systems running IE 6, 7 and 8 are vulnerable but will never receive a patch, since Microsoft no longer supports them - leaving every unpatched XP endpoint exposed with no vendor fix coming.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2014-1776
- Related