Lucene search

K
zdiJose A. Vazquez of Yenteasy - Security Research -ZDI-13-224
HistorySep 11, 2013 - 12:00 a.m.

Microsoft Internet Explorer CHtmParse Use-After-Free Remote Code Execution Vulnerability

2013-09-1100:00:00
Jose A. Vazquez of Yenteasy - Security Research -
www.zerodayinitiative.com
18

0.843 High

EPSS

Percentile

98.5%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of DOM manipulation. Using this vulnerability, an attacker is able to cause a use-after-free condition. This allows for an attacker to execute arbitrary code in the context of the browser.

0.843 High

EPSS

Percentile

98.5%