Microsoft Internet Explorer CVE-2013-3152 Memory Corruption Vulnerability

Bugtraq ID:	60971
Class:	Unknown
CVE:	CVE-2013-3152
Remote:	Yes
Local:	No
Published:	Jul 09 2013 12:00AM
Updated:	Mar 19 2015 08:46AM
Credit:	An anonymous researcher, working with HP's Zero Day Initiative.
Vulnerable:	Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server MM 1.1 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5 Avaya Messaging Application Server 4 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Conferencing Standard Edition 6.0 SP1 Avaya Conferencing Standard Edition 6.0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya CallPilot 0
Not Vulnerable:

Microsoft Internet Explorer CVE-2013-3152 Memory Corruption Vulnerability

Microsoft Internet Explorer is prone to a memory-corruption vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions.

Microsoft Internet Explorer 10 is affected.

Microsoft Internet Explorer CVE-2013-3152 Memory Corruption Vulnerability

References:

• Microsoft Internet Explorer Homepage (Microsoft)
  
• Microsoft Internet Explorer CTreePos Use-After-Free Remote Code Execution Vulner (TippingPoint Zero Day Initiative)
  
• Microsoft Security Bulletin MS13-055 (Microsoft)
  
• MS13-055 Cumulative Security Update for Internet Explorer (2846071) (Avaya)