Vulnerability Note VU#237655
Microsoft Internet Explorer 8 CGenericElement object use-after-free vulnerability
Microsoft Internet Explorer 8 contains a use-after-free vulnerability in the CGenericElement object, which is currently being exploited in the wild.
Internet Explorer 6, Internet Explorer 7, Internet Explorer 9, and Internet Explorer 10 are not affected by the vulnerability.
A remote unauthenticated attacker may be able to run arbitrary code in the context of the user running Internet Explorer 8.
Apply an Update
Apply a Microsoft "Fix It"
Vendor Information (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||-||06 May 2013|
CVSS Metrics (Learn More)
This vulnerability was discovered in the wild.
This document was written by Jared Allar.
- CVE IDs: CVE-2013-1347
- Date Public: 03 May 2013
- Date First Published: 06 May 2013
- Date Last Updated: 14 May 2013
- Document Revision: 28
If you have feedback, comments, or additional information about this vulnerability, please send us email.