Microsoft Internet Explorer CVE-2013-3146 Memory Corruption Vulnerability

Bugtraq ID:	60965
Class:	Unknown
CVE:	CVE-2013-3146
Remote:	Yes
Local:	No
Published:	Jul 09 2013 12:00AM
Updated:	Mar 19 2015 09:12AM
Credit:	Toan Pham Van, working with HP's Zero Day Initiative.
Vulnerable:	Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server MM 1.1 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5 Avaya Messaging Application Server 4 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Conferencing Standard Edition 6.0 SP1 Avaya Conferencing Standard Edition 6.0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya CallPilot 0
Not Vulnerable:

Microsoft Internet Explorer CVE-2013-3146 Memory Corruption Vulnerability

Microsoft Internet Explorer is prone to a memory-corruption vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions.

Microsoft Internet Explorer 10 is affected.

Microsoft Internet Explorer CVE-2013-3146 Memory Corruption Vulnerability

Working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Internet Explorer CVE-2013-3146 Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Internet Explorer CVE-2013-3146 Memory Corruption Vulnerability

References:

• Microsoft Internet Explorer Homepage (Microsoft)