CVE-2013-3163KEV · OVERDUE

Microsoft Internet Explorer Memory Corruption Vulnerability

High · published July 10, 2013

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

1282
days past CISA
deadline
CVSS v3.1
8.8
EPSS
71%
Percentile
99.4
In the wild
Confirmed
What it is

🚨 A crafted website could allow attackers to execute arbitrary code on your system! This memory corruption vulnerability in Internet Explorer 8 to 10 is a serious threat. ⚡ Think of it like a restaurant that serves food which, unbeknownst to the staff, has been tampered with. One unsuspecting diner could receive a dish that causes chaos in their system, leading to widespread trouble for everyone at the table. If exploited, an attacker could take control of your system, leading to unauthorized access to sensitive information or even a complete system crash. It’s like handing over the keys to your home, with all your belongings inside, and inviting trouble right in!

Put simply

Think of it like a restaurant that serves food which, unbeknownst to the staff, has been tampered with. One unsuspecting diner could receive a dish that causes chaos in their system, leading to widespread trouble for everyone at the table. This vulnerability allows remote attackers to exploit memory corruption issues in Internet Explorer, enabling them to execute arbitrary code or cause a denial of service. Essentially, the browser mishandles certain inputs, allowing for malicious actions to occur.

What to do

If exploited, an attacker could take control of your system, leading to unauthorized access to sensitive information or even a complete system crash. It’s like handing over the keys to your home, with all your belongings inside, and inviting trouble right in! To protect yourself, upgrade to a modern browser immediately—Internet Explorer is no longer supported. Ensure your system is patched with the latest security updates, and consider switching to a more secure alternative. 🛡️ You've got this! Take these steps, and you'll keep your system safe from evildoers! 💪

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.70676 · 99.4th percentile
Published
2013-07-10T01:00Z
KEV added
2023-03-30 · due 2023-04-20
EPSS history
Timeline
  • 30 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 20
    kev
  • 10 JUL 01:00Z
    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web…
    cvelistv5