Lucene search
Microsoft Security Response CenterMSRC:C24E7A07D4EEFB863B5DDA597390D200HistorySep 17, 2013 - 7:00 a.m.
CVE-2013-3893: Fix it workaround available
2013-09-1707:00:00
Microsoft Security Response Center
msrc.microsoft.com
8
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.965
Percentile
99.6%
Today, we released a Fix it workaround tool to address a new IE vulnerability that had been actively exploited in extremely limited, targeted attacks. This Fix it makes a minor modification to mshtml.dll when it is loaded in memory to address the vulnerability. This Fix it workaround tool is linked fromSecurity Advisory 2887505 that describes this issue.
Related
threatpost
threatpost
APT Group Embeds C&C Data on TechNet Pages
2015-05-18 15:03:16
Metasploit Exploit Module for IE Zero-Day Vulnerability
2013-10-01 13:47:22
IE Zero Day Used in Targeted Attacks Against Japanese Firms
2013-09-23 13:57:33
zdt
zdt
Microsoft Internet Explorer SetMouseCapture Use-After-Free
2013-10-02 00:00:00
Microsoft Internet Explorer 8 - (SetMouseCapture) Use After Free Exploit
2021-05-17 00:00:00
metasploit
metasploit
MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free
2013-10-12 18:01:17
MS13-080 Microsoft Internet Explorer SetMouseCapture Use-After-Free
2013-09-29 23:24:13
cve
cve
CVE-2013-3893
2013-09-18 10:08:24
thn
thn
Internet Explorer zero-day exploit used watering hole attacks to target Japanese users
2013-09-24 14:02:00
China-linked APT17 Targets Italian Companies with 9002 RAT Malware
2024-07-17 08:47:00
packetstorm
packetstorm
Microsoft Internet Explorer SetMouseCapture Use-After-Free
2013-09-30 00:00:00
Microsoft Internet Explorer 8 SetMouseCapture Use-After-Free
2021-05-17 00:00:00
MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free
2013-10-14 00:00:00
saint
saint
seebug
seebug
MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free
2014-07-01 00:00:00
Microsoft IE MSHTML内存破坏远程代码执行漏洞(CVE-2013-3893)
2013-09-18 00:00:00
cvelist
cvelist
CVE-2013-3893
2013-09-18 10:00:00
nessus
nessus
MS KB2887505: Vulnerability in Internet Explorer Could Allow Remote Code Execution
2013-09-17 00:00:00
MS13-080: Cumulative Security Update for Internet Explorer (2879017)
2013-10-09 00:00:00
cisa
cisa
Microsoft Releases Security Advisory for Internet Explorer
2013-09-18 00:00:00
mskb
mskb
MS13-080: Cumulative security update for Internet Explorer: October 8, 2013
2017-01-07 00:00:00
nvd
nvd
CVE-2013-3893
2013-09-18 10:08:24
msrc
msrc
MS13-080 addresses two vulnerabilities under limited, targeted attacks
2013-10-08 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Memory Corruption (CVE-2013-3893)
2013-09-18 00:00:00
attackerkb
attackerkb
Microsoft Internet Explorer SetMouseCapture Use-After-Free
2013-09-18 00:00:00
Microsoft Internet Explorer SetMouseCapture Use-After-Free
2020-10-14 00:00:00
prion
prion
Design/Logic Flaw
2013-09-18 10:08:00
jvn
jvn
JVN#27443259: Internet Explorer vulnerable to arbitrary code execution
2013-09-19 00:00:00
symantec
symantec
Microsoft Internet Explorer CVE-2013-3893 Memory Corruption Vulnerability
2013-09-17 00:00:00
exploitdb
exploitdb
securityvulns
securityvulns
Microsoft Internet Explorer multiple security vulnerabilities
2013-10-09 00:00:00
openvas
openvas
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
0.965
Percentile
99.6%
Related for MSRC:C24E7A07D4EEFB863B5DDA597390D200