CVE-2013-1297: Infoleak

Published May 15, 2013

Updated

Microsoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which allows remote attackers to perform cross-domain reading of JSON files via a crafted web site, aka "JSON Array Information Disclosure Vulnerability."

Affected Software

3 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Event History

May 15, 2013

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1297?

CVE-2013-1297 is rated as a critical vulnerability due to its potential for information disclosure.

How do I fix CVE-2013-1297?

To fix CVE-2013-1297, users should update their Microsoft Internet Explorer to the latest version available, ideally moving away from versions 6, 7, or 8.

What can attackers do through CVE-2013-1297?

Attackers can exploit CVE-2013-1297 to perform unauthorized cross-domain reading of JSON files.

Which versions of Microsoft Internet Explorer are affected by CVE-2013-1297?

CVE-2013-1297 affects Microsoft Internet Explorer versions 6, 7, and 8.

Is CVE-2013-1297 exploitable through a web browser?

Yes, CVE-2013-1297 is exploitable through a web browser via a crafted web page designed to take advantage of the vulnerability.