Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-3143. PoCs published by Skylined.
AI-analyzed exploit summary This HTML file exploits a use-after-free vulnerability in Microsoft Internet Explorer 9 by manipulating DOM nodes and event listeners. The vulnerability is triggered by removing a node and writing to the document, leading to potential memory corruption.
Description
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3161.
Exploits (2)
This HTML file exploits a use-after-free vulnerability in Microsoft Internet Explorer 9 by manipulating DOM nodes and event listeners. The vulnerability is triggered by removing a node and writing to the document, leading to potential memory corruption.
This is a functional Metasploit exploit for CVE-2013-3143, targeting a use-after-free vulnerability in Internet Explorer 8. It leverages a crafted HTML page with JavaScript to trigger the vulnerability and achieve remote code execution via ROP chains tailored for Windows XP SP3 and Windows 7.