CVE

Id
63793  
CVE No.
CVE-2013-3846  
Status
Candidate  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted CSpliceTreeEngine::InsertSplice object in an HTML document, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143 and CVE-2013-3161.  
Phase
Assigned (20130603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
631280 63793 CVE-2013-3846 MISC:http://www.zerodayinitiative.com/advisories/ZDI-13-231/  View
631281 63793 CVE-2013-3846 MS:MS13-055  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22473 JVNDB-2013-004048 Microsoft Office および Word 製品における任意のコードを実行される脆弱性 Microsoft Office 2003、2007、Word 2003、2007、Office 互換機能パックおよび Word Viewer には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2013-3851 63793 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004048.html  View