CVE-2013-1288: Use After Free
Published Mar 13, 2013
·Updated
Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CTreeNode Use After Free Vulnerability."
Affected Software
26 affected components
All of the following
Microsoft Internet Explorer=8
Any of the following
Microsoft Windows 7
Microsoft Windows 7=sp1
Microsoft Windows 7=sp1
Microsoft Windows Server 2003=sp2
Microsoft Windows Server 2008=r2
Microsoft Windows Server 2008=r2
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Vista=sp2
Microsoft Windows Vista=sp2
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Microsoft Internet Explorer=8
Microsoft Windows 7
Microsoft Windows 7=sp1
Microsoft Windows 7=sp1
Microsoft Windows Server 2003=sp2
Microsoft Windows Server 2008=r2
Microsoft Windows Server 2008=r2
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=sp2
Microsoft Windows Vista=sp2
Microsoft Windows Vista=sp2
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Event History
Mar 13, 2013
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1288?
CVE-2013-1288 has a critical severity rating due to its potential to allow remote code execution.
2
How do I fix CVE-2013-1288?
To fix CVE-2013-1288, update Microsoft Internet Explorer 8 to the latest version available from Microsoft.
3
What systems are affected by CVE-2013-1288?
CVE-2013-1288 affects Microsoft Internet Explorer 8 running on various Windows operating systems.
4
What type of vulnerability is CVE-2013-1288?
CVE-2013-1288 is classified as a use-after-free vulnerability.
5
Can CVE-2013-1288 be exploited through malicious websites?
Yes, CVE-2013-1288 can be exploited by attackers through specially crafted malicious websites.