CVE-2013-5045: Input Validation
First published: Wed Dec 11 2013(Updated: )
Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =10 | |
| Internet Explorer | =11 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-5045?
CVE-2013-5045 has a high severity rating due to its potential to allow privilege escalation.
How do I fix CVE-2013-5045?
To fix CVE-2013-5045, ensure that you apply the latest security updates provided by Microsoft for Internet Explorer.
Who is affected by CVE-2013-5045?
CVE-2013-5045 affects users of Microsoft Internet Explorer versions 10 and 11.
What kind of vulnerability is CVE-2013-5045?
CVE-2013-5045 is an elevation of privilege vulnerability that can be exploited by local users.
Can CVE-2013-5045 be exploited remotely?
No, CVE-2013-5045 requires local access to the machine to exploit the vulnerability.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/10
- version/internet explorer/11