Lucene search
Immunity CanvasIE_CARDSPACECLAIMCOLLECTIONHistoryNov 12, 2013 - 2:35 p.m.
Immunity Canvas: IE_CARDSPACECLAIMCOLLECTION
2013-11-1214:35:00
Immunity Canvas
exploitlist.immunityinc.com
28
0.963 High
EPSS
Percentile
99.6%
| Name | ie_cardspaceclaimcollection |
|---|---|
| CVE | CVE-2013-3918 Exploit Pack |
| VENDOR: Microsoft | |
| NOTES: | |
| - This exploits leaks a vtable pointer of a CTable object in order to bypass ASLR | |
| - We also leak the shellcode’s address so there’s no need for heap spraying |
This exploit has been tested on:
- Windows 7 Professional (x86) on IE 9 mshtml.dll version 9.00.8112.16457.
- Windows 7 Home Basic (x64) on IE 9 32 bits mshtml.dll version 9.00.8112.16421.
- Windows 7 Ultimate (x86) on IE 8 mshtml.dll version 8.00.7600.16385.
Repeatability: Single
References: http://technet.microsoft.com/en-us/security/bulletin/ms13-090
CVE Url: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-3918
Related
symantec
symantec
msrc
msrc
ActiveX Control issue being addressed in Update Tuesday
2013-11-11 08:00:00
nessus
nessus
MS13-090: Cumulative Security Update of ActiveX Kill Bits (2900986)
2013-11-13 00:00:00
openvas
openvas
Microsoft Windows ActiveX Control RCE Vulnerability (2900986)
2013-11-13 00:00:00
Microsoft Windows ActiveX Control RCE Vulnerability (2900986)
2013-11-13 00:00:00
nvd
nvd
CVE-2013-3918
2013-11-12 14:35:11
zdt
zdt
MS13-090 CardSpaceClaimCollection ActiveX Integer Underflow
2013-11-26 00:00:00
packetstorm
packetstorm
MS13-090 CardSpaceClaimCollection ActiveX Integer Underflow
2013-11-26 00:00:00
attackerkb
attackerkb
MS13-090 CardSpaceClaimCollection ActiveX Integer Underflow
2013-11-12 00:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Out-of-bounds
2013-11-12 14:35:00
cvelist
cvelist
CVE-2013-3918
2013-11-12 01:00:00
cve
cve
CVE-2013-3918
2013-11-12 14:35:11
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2013-11-13 00:00:00