CVE-2013-3846

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted CSpliceTreeEngine::InsertSplice object in an HTML document, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3143 and CVE-2013-3161.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

21.97% chance of exploitation in the next 30 days, 97th percentile

Published

2013-12-29

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28187

References

• CVE Record
• NVD entry

Related

• CVE-2013-3843
• CVE-2013-3870
• CVE-2013-3827
• CVE-2013-3881
• CVE-2013-3803
• CVE-2013-3893