CVE-2013-5045

Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka "Internet Explorer Elevation of Privilege Vulnerability."

Score

CVSS 2.0 6.2 Medium

Status

Modified - secure@microsoft.com

Published

2013-12-11

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Internet Explorer (Microsoft)

References

• http://packetstormsecurity.com/files/127245/MS13-097-Registry-Symlink-IE-Sandbox-Escape.html
• http://www.exploit-db.com/exploits/33893
• http://www.osvdb.org/100757
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-097