{"uuid": "190a87d3-7b5a-4ff9-a20c-de1dbe9ace7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0322", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms14_012_cmarkup_uaf.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Unknown\", \"Jean-Jamil Khalife\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an use after free condition on Internet Explorer as used in the wild\\n          as part of \\\"Operation SnowMan\\\" in February 2014. The module uses Flash Player 12 in order to\\n          bypass ASLR and DEP.\", \"disclosure_date\": \"2014-02-13\", \"fullname\": \"exploit/windows/browser/ms14_012_cmarkup_uaf\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS14-012 Microsoft Internet Explorer CMarkup Use-After-Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms14_012_cmarkup_uaf.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/ms14_012_cmarkup_uaf\", \"references\": [\"CVE-2014-0322\", \"MSB-MS14-012\", \"BID-65551\", \"URL-http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html\", \"URL-http://hdwsec.fr/blog/CVE-2014-0322.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows 7 SP1 / IE 10 / FP 12\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:10.903965Z"}