Microsoft Internet Explorer CVE-2014-6349 Remote Privilege Escalation Vulnerability

Bugtraq ID:	70939
Class:	Design Error
CVE:	CVE-2014-6349
Remote:	Yes
Local:	No
Published:	Nov 11 2014 12:00AM
Updated:	Nov 19 2014 12:59AM
Credit:	James Forshaw, working with Google Project Zero
Vulnerable:	Avaya Messaging Application Server 0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Communication Server 1000 Telephony Manager 0 Avaya CallPilot 0
Not Vulnerable:

Microsoft Internet Explorer CVE-2014-6349 Remote Privilege Escalation Vulnerability

Microsoft Internet Explorer is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks.

Internet Explorer 10 and 11 are vulnerable.

Microsoft Internet Explorer CVE-2014-6349 Remote Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Internet Explorer CVE-2014-6349 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Internet Explorer CVE-2014-6349 Remote Privilege Escalation Vulnerability

References:

• Microsoft Internet Explorer Homepage (Microsoft)