Lucene search

MicrosoftCVE-2013-3163

HistoryJul 10, 2013 - 3:46 a.m.

CVE-2013-3163

2013-07-1003:46:10

CWE-787

microsoft

web.nvd.nist.gov

459

In Wild

microsoft

internet explorer

cve-2013-3163

remote attack

arbitrary code execution

denial of service

memory corruption

security vulnerability

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.958

Percentile

99.5%

JSON

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka “Internet Explorer Memory Corruption Vulnerability,” a different vulnerability than CVE-2013-3144 and CVE-2013-3151.

Affected configurations

Nvd

Node

microsoftinternet_explorerMatch8

AND

microsoftwindows_7Match-sp1

microsoftwindows_server_2003Match-sp2x64

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_server_2008Matchr2sp1itanium

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_vistaMatch-sp2-x64

microsoftwindows_xpMatch-sp2professionalx64

microsoftwindows_xpMatch-sp3

Node

microsoftinternet_explorerMatch9

AND

microsoftwindows_7Match-sp1

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_vistaMatch-sp2-x64

Node

microsoftinternet_explorerMatch10

AND

microsoftwindows_7Match-sp1

microsoftwindows_8Match-

microsoftwindows_rtMatch-

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_server_2012Match-

VendorProductVersionCPE
microsoftinternet_explorer8cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
microsoftwindows_server_2003-cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
microsoftwindows_vista-cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:-:*:x64:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
microsoftinternet_explorer9cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	internet_explorer	8	cpe:2.3:a:microsoft:internet_explorer:8:::::::*
microsoft	windows_7	-	cpe:2.3:o:microsoft:windows_7:-:sp1::::::
microsoft	windows_server_2003	-	cpe:2.3:o:microsoft:windows_server_2003:-:sp2:::::x64:*
microsoft	windows_server_2008	-	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::x64:*
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::itanium:*
microsoft	windows_server_2008	r2	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
microsoft	windows_vista	-	cpe:2.3:o:microsoft:windows_vista:-:sp2:::-::x64:
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp2:::professional::x64:
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp3::::::
microsoft	internet_explorer	9	cpe:2.3:a:microsoft:internet_explorer:9:::::::*