CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2013-03-11
Microsoft Internet Explorer 6-10 Use-After-Free Remote Code Execution Vulnerability (CVE-2013-2551, MS13-037)
[Affected Scope] Microsoft Internet Explorer versions 6, 7, 8, 9, and 10
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user by enticing them to visit a specially crafted malicious website that triggers a Use-After-Free condition.
[Mitigation] Apply the official Microsoft MS13-037 security update, transition to modern browsers (e.g., Microsoft Edge), or unregister the VML rendering engine (vgx.dll) as a temporary workaround.