Test ID:	1.3.6.1.4.1.25623.1.0.804500
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (2925418)
Summary:	This host is missing a critical security update according to Microsoft; Bulletin MS14-012.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS14-012. Vulnerability Insight: Multiple flaws are due to: error when handling CMarkup objects and multiple unspecified errors. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code, corrupt memory and compromise a user's system. Affected Software/OS: Microsoft Internet Explorer version 6.x/7.x/8.x/9.x/10.x/11.x. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0297 Microsoft Security Bulletin: MS14-012 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-012 Common Vulnerability Exposure (CVE) ID: CVE-2014-0298 Common Vulnerability Exposure (CVE) ID: CVE-2014-0299 Common Vulnerability Exposure (CVE) ID: CVE-2014-0302 Common Vulnerability Exposure (CVE) ID: CVE-2014-0303 Common Vulnerability Exposure (CVE) ID: CVE-2014-0304 Common Vulnerability Exposure (CVE) ID: CVE-2014-0305 Common Vulnerability Exposure (CVE) ID: CVE-2014-0306 Common Vulnerability Exposure (CVE) ID: CVE-2014-0307 http://www.exploit-db.com/exploits/32438 Common Vulnerability Exposure (CVE) ID: CVE-2014-0308 Common Vulnerability Exposure (CVE) ID: CVE-2014-0309 Common Vulnerability Exposure (CVE) ID: CVE-2014-0311 Common Vulnerability Exposure (CVE) ID: CVE-2014-0312 Common Vulnerability Exposure (CVE) ID: CVE-2014-0313 Common Vulnerability Exposure (CVE) ID: CVE-2014-0314 Common Vulnerability Exposure (CVE) ID: CVE-2014-0321 Common Vulnerability Exposure (CVE) ID: CVE-2014-0322 CERT/CC vulnerability note: VU#732479 http://www.kb.cert.org/vuls/id/732479 http://www.exploit-db.com/exploits/32851 http://www.exploit-db.com/exploits/32904 http://community.websense.com/blogs/securitylabs/archive/2014/02/13/msie-0-day-exploit-cve-2014-0322-possibly-targeting-french-aerospace-organization.aspx http://twitter.com/nanoc0re/statuses/434251658344673281 http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/new-ie-zero-day-found-in-watering-hole-attack-2.html http://www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html https://www.dropbox.com/s/pyxjgycmudirbqe/CVE-2014-0322.zip http://www.osvdb.org/103354 Common Vulnerability Exposure (CVE) ID: CVE-2014-0324
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.