CVE-2013-3148: Code Injection

Published Jul 10, 2013

Updated

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3153.

Affected Software

5 affected components

Microsoft Internet Explorer=6

Microsoft Internet Explorer=7

Microsoft Internet Explorer=8

Microsoft Internet Explorer=9

Microsoft Internet Explorer=10

Event History

Jul 10, 2013

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3148?

The severity of CVE-2013-3148 is rated as critical with a score of 9.3.

How do I fix CVE-2013-3148?

To fix CVE-2013-3148, update Microsoft Internet Explorer to the latest version provided by Microsoft.

What type of vulnerability is CVE-2013-3148?

CVE-2013-3148 is classified as a code injection vulnerability that allows remote attackers to execute arbitrary code.

Who is affected by CVE-2013-3148?

CVE-2013-3148 affects users of Microsoft Internet Explorer versions 6 through 10.

What are the potential impacts of CVE-2013-3148?

The potential impacts of CVE-2013-3148 include remote code execution and denial of service due to memory corruption.