Microsoft Internet Explorer Node NS Memory Corruption

Strike ID:
E13-5em01
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
60
Year:
2013

Description

This strike exploits a double free memory corruption vulnerability in Microsoft Windows Internet Explorer. The vulnerability lies in the handling of svg element properties. By enticing a user to view a malicious web page, an attacker could execute arbitrary code on the victim machine in the context of the user.

CVE

Bid