CVE-2013-1338
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Internet Explorer（IE）是美国微软（Microsoft）公司开发的一款Web浏览器，是Windows操作系统附带的默认浏览器。 Internet Explorer 访问内存中已被删除的对象的方式中存在远程执行代码漏洞。这些漏洞可能以一种攻击者可以在当前用户的上下文中执行任意代码的方式损坏内存。Internet Explorer 6至10版本中存在漏洞。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2013-1338
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1303 and CVE-2013-1304.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Internet Explorer 远程执行代码漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Internet Explorer（IE）是美国微软（Microsoft）公司开发的一款Web浏览器，是Windows操作系统附带的默认浏览器。 Internet Explorer 访问内存中已被删除的对象的方式中存在远程执行代码漏洞。这些漏洞可能以一种攻击者可以在当前用户的上下文中执行任意代码的方式损坏内存。Internet Explorer 6至10版本中存在漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2013-1338
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-1338
请登录查看更多情报信息。
Vendor Advisories for CVE-2013-1338 (3)
-
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-028 vendor-advisory x_refsource_MS
-
-
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16621 vdb-entry signature x_refsource_OVAL
Same Patch Batch · n/a · 2013-05-02 · 21 CVEs total
| CVE-2013-1845 | Apache Subversion ‘mod_dav_svn’拒绝服务漏洞 | |
| CVE-2013-2321 | HP Service Manager 未明跨站脚本漏洞 | |
| CVE-2012-5222 | HP Service Manager 未明信息泄露漏洞 | |
| CVE-2013-3266 | FreeBSD NFS Server 输入验证漏洞 | |
| CVE-2009-5135 | Echo Java XML解析器输入验证漏洞 | |
| CVE-2013-2944 | strongSwan OpenSSL插件身份验证绕过漏洞 | |
| CVE-2013-1884 | Apache Subversion 远程拒绝服务漏洞 | |
| CVE-2013-1849 | Apache Subversion ‘mod_dav_svn’远程拒绝服务漏洞 | |
| CVE-2013-1847 | Apache Subversion ‘mod_dav_svn/lock.c’远程拒绝服务漏洞 | |
| CVE-2013-1846 | Apache Subversion ‘mod_dav_svn’远程拒绝服务漏洞 | |
| CVE-2013-0535 | IBM Sametime Classic Meeting Server 多个跨站脚本漏洞 | |
| CVE-2013-0306 | Django 拒绝服务漏洞 | |
| CVE-2013-0305 | Django 信息泄露漏洞 | |
| CVE-2012-5657 | Zend Framework ‘Zend_Feed’组件信息泄露漏洞 | |
| CVE-2012-4481 | Ruby 权限许可和访问控制问题漏洞 | |
| CVE-2012-0864 | GNU C Library 数字错误漏洞 | |
| CVE-2011-4609 | GNU glibc ‘svc_run()’ 函数拒绝服务漏洞 | |
| CVE-2009-5029 | GNU C Library 数字错误漏洞 | |
| CVE-2013-1091 | Novell iPrint Client 基于栈的缓冲区溢出漏洞 | |
| CVE-2013-0582 | IBM Tivoli Federated Identity Manager FIM SAML响应跨站脚本漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2013-1338
No comments yet