Junglewise Threat Intelligence

CVE-2013-1347: Microsoft Internet Explorer Remote Code Execution Vulnerability

CVE-2013-1347 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2022-03-03

Technologies: Microsoft Edge, Microsoft Internet Explorer. Vendors: Microsoft.

Executive brief

A use-after-free vulnerability in Microsoft Internet Explorer 8 occurs when the browser improperly handles objects in memory. Remote attackers can exploit this to execute arbitrary code in the context of the current user by accessing objects that were not properly allocated or have been deleted.

Affected products

  • Microsoft Internet Explorer 8 8

Timeline

  • 2013-05: exploited: Exploited in the wild in May 2013.
  • 2022-03-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog.

Related threats