CVE-2013-1347

high-risk
Published 2013-05-05

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.

Do I need to act?

!
87.7% chance of exploitation in next 30 days
EPSS score — higher than 12% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
1 public exploit available
25294
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Microsoft

References (11)

Mitigation http://technet.microsoft.com/security/advisory/2847140
Exploit http://www.exploit-db.com/exploits/25294
Third Party Advisory http://www.us-cert.gov/ncas/alerts/TA13-134A
Patch https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-03...
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
Mitigation http://technet.microsoft.com/security/advisory/2847140
Exploit http://www.exploit-db.com/exploits/25294
Third Party Advisory http://www.us-cert.gov/ncas/alerts/TA13-134A
Patch https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-03...
Broken Link https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3...
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-...
69
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 34/34 · Critical
Exposure 5/34 · Minimal