CVE-2014-4123

Sažetak

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.

Reference

http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx
http://secunia.com/advisories/60968
http://www.securityfocus.com/bid/70326
http://www.securitytracker.com/id/1031018
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056
http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx
http://secunia.com/advisories/60968
http://www.securityfocus.com/bid/70326
http://www.securitytracker.com/id/1031018
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-056

CVSS

Base:	6.8
Impact:	6.4
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:M/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

14-03-2025 - 20:17

Objavljeno

15-10-2014 - 10:55