Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Renato Ettisberger

Pesquisador deIOprotect GmbH
#27056de 53,638
9.3CVSS total
Vulnerabilidades · 1
PT-2013-1349
9.3
2013-09-18
Microsoft · Internet Explorer · CVE-2013-3897
**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 6 through 11 **Description** The issue is related to a use-after-free error in the CDisplayPointer class, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service through memory corruption. This can be achieved by using crafted JavaScript code that utilizes the `onpropertychange` event handler. There have been real-world incidents where this issue was exploited in September and October 2013. **Recommendations** For Microsoft Internet Explorer versions 6 through 11, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider disabling JavaScript or restricting access to potentially malicious websites to minimize the risk of exploitation.