CVE-2013-2551

CVE Published 2013-03-11
Related CWE(s) CWE-416: Use After Free
Related Vendor(s) microsoft
Related Product(s) internet_explorer
Exploitation Reported (CISA KEV) 2022-03-28
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References