Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-3120. PoCs published by Skylined.
AI-analyzed exploit summary This exploit leverages a use-after-free vulnerability in Microsoft Internet Explorer 10 by manipulating the document.designMode and document.execCommand APIs to trigger stale pointer usage in CEditAdorner::Detach, potentially leading to arbitrary code execution.
Description
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3118 and CVE-2013-3125.
Exploits (1)
This exploit leverages a use-after-free vulnerability in Microsoft Internet Explorer 10 by manipulating the document.designMode and document.execCommand APIs to trigger stale pointer usage in CEditAdorner::Detach, potentially leading to arbitrary code execution.