Microsoft Internet Explorer Cumulative Security Update

Last Update Date: 11 Jun 2014 14:31 Release Date: 11 Jun 2014 3155 Views

RISK: Extremely High Risk

TYPE: Clients - Browsers

TLS Server Certificate Renegotiation Vulnerability
An information disclosure vulnerability exists in the way that Internet Explorer handles negotiation of certificates in a TLS session. An attacker who successfully exploited this vulnerability could hijack a mutually authenticated TLS connection between Internet Explorer and an arbitrary target server.
Internet Explorer Information Disclosure Vulnerability
An information disclosure vulnerability exists within Internet Explorer during validation of local file installation.
Multiple Elevation of Privilege Vulnerabilities in Internet Explorer
Elevation of privilege vulnerabilities exist within Internet Explorer. An attacker who successfully exploited these vulnerabilities could elevate privileges in affected versions of Internet Explorer. These vulnerabilities by themselves do not allow arbitrary code to be run. However, these vulnerabilities could be used in conjunction with another vulnerability (e.g., a remote code execution vulnerability) that could take advantage of the elevated privileges when running arbitrary code.
Multiple Memory Corruption Vulnerabilities in Internet Explorer
Remote code execution vulnerabilities exist when Internet Explorer improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.