cbcvebase.
CVE-2013-0090
published 2013-03-13

CVE-2013-0090: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers…

PriorityP267high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EXPLOIT
EPSS
38.22%
98.4th percentile
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CCaret Use After Free Vulnerability."

Affected

5 ranges
VendorProductVersion rangeFixed in
microsoftinternet_explorer——
microsoftinternet_explorer——
microsoftinternet_explorer——
microsoftinternet_explorer——
microsoftinternet_explorer——

Detection & IOCsextracted from sources · hover to see the quote

  • →Trigger pattern involves removing a DOM element via removeChild, then forcing a layout recalculation (offsetTop) followed by document.write and a reload — this sequence is characteristic of the CCaret use-after-free exploit ↗
  • →Vulnerability is triggered via a crafted web site that causes access to a deleted object (CCaret object); monitor for IE processes accessing freed memory regions after DOM manipulation ↗
  • ·Affects Internet Explorer versions 6 through 10; IE 9 is specifically demonstrated in the exploit-db proof-of-concept (MS13-021) ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.