ASLR Bypass vulnerability in Internet Explorer - CVE-2014-6368ID: oval:org.secpod.oval:def:21869 | Date: (C)2014-12-10 (M)2022-11-24 |
Class: VULNERABILITY | Family: windows |
The host is installed with Internet Explorer 11 and is prone to an ASLR bypass vulnerability. A flaw is present in the application, which does not use the Address Space Layout Randomization (ASLR) security feature, allowing an attacker to more reliably predict the memory offsets of specific instructions in a given call stack. An attacker who successfully exploited this vulnerability could bypass the Address Space Layout Randomization (ASLR) security feature.
Platform: |
Microsoft Windows 7 |
Microsoft Windows Server 2008 R2 |
Microsoft Windows 8.1 |
Microsoft Windows Server 2012 R2 |
Product: |
Microsoft Internet Explorer 11 |