HTTP: Microsoft Internet Explorer CVE-2013-2551 Remote Code Execution

This signature detects an attempt to exploit a known vulnerability against Microsoft Internet Explorer. Successful exploitation could allow an attacker to execute arbitrary codes into the context of the running operating system.

Extended Description

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013, aka "Internet Explorer Use After Free Vulnerability," a different vulnerability than CVE-2013-1308 and CVE-2013-1309.

References

BugTraq: 58570

CVE: CVE-2013-2551

URL: http://technet.microsoft.com/security/bulletin/ms13-037

Short Name

HTTP:MISC:IE-CVE-2013-2551-RCE

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Internet Explorer CVE-2013-2551 Remote Code Execution

Extended Description

References

Found a potential security threat?