cbcvebase.
CVE-2013-1306
published 2013-05-15

CVE-2013-1306: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to…

PriorityP261critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
33.41%
98.2th percentile
Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1313.

Affected

1 ranges
VendorProductVersion rangeFixed in
microsoftinternet_explorer——

Detection & IOCsextracted from sources · hover to see the quote

  • →CSS combination of display:table-caption on an element with a :first-line pseudo-element applying text-transform:uppercase is used to trigger the UAF condition ↗
  • ·Vulnerability is specific to Internet Explorer 9 only; patched by Microsoft in MS13-037 (May 2013) ↗
  • ·This is a distinct vulnerability from CVE-2013-1313, which is also an IE Use-After-Free addressed in the same patch ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.