medium6.2Public exploit code
CVE-2013-5045
Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Registry Symlink - IE Sandbox Escape (MS13-097) (Metasploit)2014-06-27 · local · windows · Verified
Impact
Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 10, 11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html
- http://www.exploit-db.com/exploits/33893
- http://www.osvdb.org/100757
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097
- http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html
- http://www.exploit-db.com/exploits/33893
- http://www.osvdb.org/100757
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097