Vulnerability record · CVE-2014-1773 · published 11 June 2014
CVE-2014-1773: Internet Explorer memory corruption allows remote code execution
Microsoft · Internet Explorer
Internet Explorer 9, 10 and 11 contain a memory corruption flaw (CWE-119) that a remote attacker can trigger by getting a victim to load a crafted web page. Successful exploitation allows arbitrary code execution in the context of the browser, or a denial of service crash. It is one of a large batch of similar IE memory corruption issues patched in the same bulletin.
Description
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.
AV:N/AC:M/Au:N/C:C/I:C/A:C
Automated analysis
high priorityRemote code execution with no authentication and a very high EPSS score, though the product is legacy and the record lacks exploit-specific detail.
What it is
Internet Explorer 9, 10 and 11 contain a memory corruption flaw (CWE-119) that a remote attacker can trigger by getting a victim to load a crafted web page. Successful exploitation allows arbitrary code execution in the context of the browser, or a denial of service crash. It is one of a large batch of similar IE memory corruption issues patched in the same bulletin.
Impact
An attacker can run arbitrary code with the privileges of the logged-on user, or crash the browser. Because IE often runs with user-level rights, full system compromise depends on the victim's privilege level.
Attack surface
Reached over the network via a crafted website viewed in Internet Explorer 9 through 11; no authentication is required, but the victim must visit or be lured to the malicious page (user interaction).
Exploitation
Not listed in CISA KEV and no reference is tagged as exploit code, but EPSS is high (0.63 probability, 99th percentile), indicating elevated likelihood of exploitation activity. No public exploit details are given in the record.
What to do
- Apply Microsoft security bulletin MS14-035, which addresses this and related IE memory corruption flaws.
- Upgrade or migrate off Internet Explorer 9-11 to a supported browser.
- Enforce EMET or OS-level exploit mitigations on systems that must keep IE.
- Restrict browsing to trusted sites and block known malicious domains at the network edge.
Detection
- Monitor for IE crashes (Event ID 1000/1001) tied to mshtml.dll or jscript.dll on endpoints.
- Hunt for suspicious child processes spawned by iexplore.exe, such as cmd.exe or powershell.exe.
- Review proxy and DNS logs for access to newly registered or low-reputation domains from IE user agents.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
Track CVE-2014-1773 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2014-1773), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
