Lucene search
HistoryMar 13, 2013 - 12:55 a.m.
CVE-2013-0092
cve-2013-0092
internet explorer
vulnerability
remote code execution
web security
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.936 High
EPSS
Percentile
99.1%
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka “Internet Explorer GetMarkupPtr Use After Free Vulnerability.”
Affected configurations
Node
microsoftinternet_explorerMatch6
microsoftwindows_server_2003sp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
Node
microsoftinternet_explorerMatch7
microsoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008sp2itanium
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008sp2x86
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
Node
microsoftinternet_explorerMatch8
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1x64
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008r2itanium
ORmicrosoftwindows_server_2008r2x64
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008sp2x86
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
Node
microsoftinternet_explorerMatch9
microsoftwindows_7Match-
ORmicrosoftwindows_7Match-sp1x64
ORmicrosoftwindows_7Match-sp1x86
ORmicrosoftwindows_server_2008r2x64
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008sp2x86
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch-sp2
Node
microsoftinternet_explorerMatch10
microsoftwindows_8Match--x64
ORmicrosoftwindows_8Match--x86
ORmicrosoftwindows_rtMatch-
ORmicrosoftwindows_server_2012Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:internet_explorer | microsoft internet explorer | eq | 6 |
Related
symantec
symantec
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
CVE-2013-0092
2013-03-13 00:00:00
nvd
nvd
CVE-2013-0092
2013-03-13 00:55:01
zdi
zdi
prion
prion
Design/Logic Flaw
2013-03-13 00:55:00
nessus
nessus
MS13-021: Security Update for Internet Explorer (2809289)
2013-03-12 00:00:00
openvas
openvas
securityvulns
securityvulns
Microsoft Internet Explorer multiple security vulnerabilities
2013-03-24 00:00:00
mskb
mskb
MS13-021: Cumulative Security Update for Internet Explorer: March 12, 2013
2013-03-12 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.936 High
EPSS
Percentile
99.1%
Related for CVE-2013-0092