Microsoft Internet Explorer Cumulative Security Vulnerabilities
Last Update Date:
10 Jul 2013 15:14
Release Date:
10 Jul 2013
3320
Views
RISK: High Risk
TYPE: Clients - Browsers
- Shift JIS Character Encoding Vulnerability
A cross-site-scripting (XSS) vulnerability exists in Internet Explorer that could allow information disclosure. An attacker could exploit the vulnerability by constructing a specially crafted webpage that could allow information disclosure if a user viewed the webpage. An attacker who successfully exploited this vulnerability could view content from another domain or Internet Explorer zone. - Multiple Memory Corruption Vulnerabilities in Internet Explorer
Remote code execution vulnerabilities exist when Internet Explorer improperly accesses an object in memory. These vulnerabilities may corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
Impact
- Cross-Site Scripting
- Information Disclosure
System / Technologies affected
- Internet Explorer 6
- Internet Explorer 7
- Internet Explorer 8
- Internet Explorer 9
- Internet Explorer 10
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/MS13-055
Vulnerability Identifier
- CVE-2013-3166
- CVE-2013-3115
- CVE-2013-3143
- CVE-2013-3144
- CVE-2013-3145
- CVE-2013-3146
- CVE-2013-3147
- CVE-2013-3148
- CVE-2013-3149
- CVE-2013-3150
- CVE-2013-3151
- CVE-2013-3152
- CVE-2013-3153
- CVE-2013-3161
- CVE-2013-3162
- CVE-2013-3163
- CVE-2013-3164
Source
Related Link
Share with