8.8Hoch
KEV
CVE-2013-1347Microsoft Internet Explorer Remote Code Execution Vulnerability
Bekannt ausgenutzt — Microsoft Internet Explorer Remote Code Execution Vulnerability
CISA hat am 03.03.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 24.03.2022.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2013-1347
Beschreibung
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| microsoft | internet explorer | 8 |
Referenzen und Patches
- 25294 exploitExploitThird Party AdvisoryVDB Entry
- TA13-134A third-party-advisoryThird Party AdvisoryUS Government Resource
- oval:org.mitre.oval:def:16727 vdb-entrysignatureBroken Link
- http://technet.microsoft.com/security/advisory/2847140 MitigationPatchVendor Advisory
- MS13-038 vendor-advisoryPatchVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1347 US Government Resource
CPE-Treffer (NVD) (1)
cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*