جزئیات آسیب‌پذیری

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.

• http://www.exploit-db.com/exploits/25294 exploitx_refsource_EXPLOIT-DB
• http://www.us-cert.gov/ncas/alerts/TA13-134A third-party-advisoryx_refsource_CERT
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16727 vdb-entrysignaturex_refsource_OVAL
• http://technet.microsoft.com/security/advisory/2847140 x_refsource_CONFIRM
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-038 vendor-advisoryx_refsource_MS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1347 government-resource