Design/Logic Flaw

2013-03-1110:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.088 Low

EPSS

Percentile

94.6%

JSON

Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013.

CPENameOperatorVersion
internet_explorereq10

CPE	Name	Operator	Version
	internet_explorer	eq	10

References

h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157

twitter.com/thezdi/statuses/309452625173176320

twitter.com/VUPEN/statuses/309479075385327617