CVE-2013-5045
medium · 6.2Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."
6.2
CVSS
17.4%
EPSS (exploit prob.)
97th
EPSS percentile
2013-12-11
Published
AV:L/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_explorer | 10 |
| microsoft | internet_explorer | 11 |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html
- http://www.exploit-db.com/exploits/33893
- http://www.osvdb.org/100757
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
- http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html
- http://www.exploit-db.com/exploits/33893
- http://www.osvdb.org/100757
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-5045