Microsoft Internet Explorer Use-After-Free Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer, which can be exploited by attackers to cause arbitrary code to be executed on the target user's system.

A remote user can create HTML with a specially crafted Adobe Flash object that, when loaded by the target user, will trigger a use-after-free memory error and execute arbitrary code on the target system. The code will run with the privileges of the target user.

The exploit currently only targets Internet Explorer 9 and 10 on systems that have Adobe Flash installed and do not have EMET installed. Windows 8 comes with Flash, so no additional software is required to be vulnerable to this exploit on that platform.

Note: Vulnerability has no patch available.