Lucene search
HistoryMar 13, 2013 - 12:55 a.m.
CVE-2013-1288
cve-2013-1288
use-after-free vulnerability
microsoft internet explorer 8
remote attackers
arbitrary code
crafted web site
access to a deleted object
internet explorer ctreenode use after free vulnerability
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.924 High
EPSS
Percentile
99.0%
Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka “Internet Explorer CTreeNode Use After Free Vulnerability.”
Affected configurations
Node
microsoftinternet_explorerMatch8
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1x64
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008r2itanium
ORmicrosoftwindows_server_2008r2x64
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008sp2x86
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:internet_explorer | microsoft internet explorer | eq | 8 |
Related
cvelist
cvelist
CVE-2013-1288
2013-03-13 00:00:00
nvd
nvd
CVE-2013-1288
2013-03-13 00:55:01
symantec
symantec
checkpoint_advisories
checkpoint_advisories
prion
prion
Design/Logic Flaw
2013-03-13 00:55:00
threatpost
threatpost
Critical IE, Windows Kernel Flaws Patched
2013-03-12 18:28:50
fireeye
fireeye
nessus
nessus
MS13-021: Security Update for Internet Explorer (2809289)
2013-03-12 00:00:00
openvas
openvas
securityvulns
securityvulns
Microsoft Internet Explorer multiple security vulnerabilities
2013-03-24 00:00:00
mskb
mskb
MS13-021: Cumulative Security Update for Internet Explorer: March 12, 2013
2013-03-12 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.924 High
EPSS
Percentile
99.0%
Related for CVE-2013-1288