← back
CVE-2013-5045

CVE-2013-5045

43Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 17%
from disclosure to weapon198 days
Published on NVDDec 11
1st PoC+198d
metasploitDec 10
exploitation probability
17%top 3% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.htmlunverifiedcve_referencewww.exploit-db.com/exploits/33893unverifiedexploitdbwww.exploit-db.com/exploits/33893unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097http://www.exploit-db.com/exploits/33893http://www.osvdb.org/100757