CVE-2014-4145

Microsoft Internet Explorer 11 permite que atacantes remotos ejecuten código arbitrario o provoquen una denegación de servicio (corrupción de memoria) mediante un sitio web manipulado. Esto se conoce como "Internet Explorer Memory Corruption Vulnerability" y es una vulnerabilidad diferente de CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, CVE-2014-4057 y CVE-2014-8985.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The issue lies in CElement::DelMarkupPtr which expects a CMarkup object at a certain offset. By calling CElement::DelMarkupPtr more than once an attacker can force type confusion that leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code under the context of the current process.