CVE

Id
63844  
CVE No.
CVE-2013-3897  
Status
Candidate  
Description
Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka "Internet Explorer Memory Corruption Vulnerability."  
Phase
Assigned (20130603)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
631539 63844 CVE-2013-3897 CONFIRM:http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulnerabilities-under-limited-targeted-attacks.aspx  View
631540 63844 CVE-2013-3897 MS:MS13-080  View
631541 63844 CVE-2013-3897 URL:http://technet.microsoft.com/security/bulletin/MS13-080  View
631542 63844 CVE-2013-3897 CERT:TA13-288A  View
631543 63844 CVE-2013-3897 URL:http://www.us-cert.gov/ncas/alerts/TA13-288A  View
631544 63844 CVE-2013-3897 OVAL:oval:org.mitre.oval:def:18989  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23885 JVNDB-2013-005460 Microsoft Windows Server 2008 R2 および Windows 7 のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 Microsoft Windows Server 2008 R2 および Windows 7 のカーネルモードドライバの win32k.sys には、解放済みメモリの使用 (Use-after-free) により、権限を取得される脆弱性が存在します。 CVE-2013-3902 63844 7.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005460.html  View