CVEvulnerability
CVE-2013-5045
6.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."
Affected configurations
• microsoft internet explorer 10
• microsoft internet explorer 11
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html Exploit, VDB Entry
- http://www.exploit-db.com/exploits/33893 www.exploit-db.com
- http://www.osvdb.org/100757 www.osvdb.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097 docs.microsoft.com
- http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html Exploit, VDB Entry
- http://www.exploit-db.com/exploits/33893 www.exploit-db.com
- http://www.osvdb.org/100757 www.osvdb.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097 docs.microsoft.com