Vulnerability Details : CVE-2013-3184

Public exploit exists!
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
Published 2013-08-14 11:10:36
Updated 2018-10-12 22:04:47
Source Microsoft Corporation
View at NVD,   CVE.org
Vulnerability category: OverflowMemory CorruptionExecute codeDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2013-3184

Probability of exploitation activity in the next 30 days: 97.13%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2013-3184

  • MS13-059 Microsoft Internet Explorer CFlatMarkupPointer Use-After-Free
    Disclosure Date: 2013-06-27
    First seen: 2020-04-26
    exploit/windows/browser/ms13_059_cflatmarkuppointer
    This is a memory corruption bug found in Microsoft Internet Explorer. On IE 9, it seems to only affect certain releases of mshtml.dll, ranging from a newly installed IE9 (9.0.8112.16446), to 9.00.8112.16502 (July 2013 update). IE8 requires a different way to trigger

CVSS scores for CVE-2013-3184

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source
9.3
 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C
8.6
10.0
 NIST

CWE ids for CVE-2013-3184

References for CVE-2013-3184

Products affected by CVE-2013-3184

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close