CVE-2013-5045

Exploit

EPSS 16.61%
Published 11.12.2013 00:55:03
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 1 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version10

Microsoft ≫ Internet Explorer Version11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	16.61%	0.946

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.2	1.9	10	AV:L/AC:H/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html

Exploit

VDB Entry

http://www.exploit-db.com/exploits/33893

http://www.osvdb.org/100757

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097

https://nvd.nist.gov/vuln/detail/CVE-2013-5045

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5045

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5045

EUVD