Exploitation Summary
CVE-2013-2551 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 28, 2022, with confirmed use in ransomware campaigns.
EIP tracks 2 public exploits from researchers including Metasploit, Nicolas Joly, 4B5F5F4B, juan vazquez, sinn3r, including a Metasploit module exploits/windows/browser/ms13_037_svg_dashstyle.
AI-analyzed exploit summary This Metasploit module exploits an integer overflow vulnerability in Internet Explorer 8 on Windows 7 SP1 via the handling of the dashstyle.array length for VML shapes in vgx.dll. It uses heap spraying and ROP chains (either JRE or ntdll-based) to achieve remote code execution.
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.
Exploits (2)
This Metasploit module exploits an integer overflow vulnerability in Internet Explorer 8 on Windows 7 SP1 via the handling of the dashstyle.array length for VML shapes in vgx.dll. It uses heap spraying and ROP chains (either JRE or ntdll-based) to achieve remote code execution.
This Metasploit module exploits an integer overflow vulnerability in Microsoft Internet Explorer (CVE-2013-2551) via a malformed VML shape dashstyle array, achieving remote code execution on Windows 7 SP1 with IE 8. It uses either JRE6 or an ntdll information leak to bypass ASLR.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H