CVE-2014-0263

Sažetak

The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a large 2D geometric figure that is encountered with Internet Explorer, aka "Microsoft Graphics Component Memory Corruption Vulnerability."

Reference

http://osvdb.org/103160
http://secunia.com/advisories/56781
http://www.securityfocus.com/bid/65393
http://www.securitytracker.com/id/1029743
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-007

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

14-05-2019 - 14:10

Objavljeno

12-02-2014 - 04:50