Privilege escalation in Microsoft Internet Explorer - CVE-2014-4124

Vulnerability identifier: #VU5876

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2014-4124

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain elevated privileges on the target system.

The weakness exists due to the failure to properly validate permissions. A remote attacker can gain elevated privileges and execute arbitrary code on the affected system.

Successful exploitation of the vulnerability may result in arbitrary code execution on the vulnerable system.

Microsoft Internet Explorer

Install update from vendor's website.

• https://technet.microsoft.com/en-us/library/security/ms14-056.aspx

• Multiple vulnerabilities in Microsoft Internet Explorer
• Cumulative Security Update for Internet Explorer