CVE-2013-1347

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly allocated or (2) is deleted, as exploited in the wild in May 2013.

• CWE-416
• CWE-416

• http://technet.microsoft.com/security/advisory/2847140Mitigation, Patch, Vendor Advisory
• http://www.exploit-db.com/exploits/25294Exploit, Third Party Advisory, VDB Entry
• http://www.us-cert.gov/ncas/alerts/TA13-134AThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-038Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16727Broken Link
• http://technet.microsoft.com/security/advisory/2847140Mitigation, Patch, Vendor Advisory
• http://www.exploit-db.com/exploits/25294Exploit, Third Party Advisory, VDB Entry
• http://www.us-cert.gov/ncas/alerts/TA13-134AThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-038Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16727Broken Link
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1347US Government Resource

Published

May 5, 2013

Last Modified

Jun 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1341win32k.sys in the kernel-mode drivers in Microsoft Windows X…
• CVE-2013-1342win32k.sys in the kernel-mode drivers in Microsoft Windows X…7.8
• CVE-2013-1343win32k.sys in the kernel-mode drivers in Microsoft Windows X…
• CVE-2013-1344win32k.sys in the kernel-mode drivers in Microsoft Windows X…
• CVE-2013-1345win32k.sys in the kernel-mode drivers in Microsoft Windows X…
• CVE-2013-1346mpengine.dll in Microsoft Malware Protection Engine before 1…
• CVE-2013-1348The Yaml::parse function in Symfony 2.0.x before 2.0.22 remo…
• CVE-2013-1349Eval injection vulnerability in ajax.php in openSIS 4.5 thro…
• CVE-2013-1350Verax NMS prior to 2.1.0 has multiple security bypass vulner…9.1
• CVE-2013-1351Verax NMS prior to 2.10 allows authentication via the encryp…5.9
• CVE-2013-1352Verax NMS prior to 2.1.0 uses an encryption key that is hard…7.5
• CVE-2013-1353Orange HRM 2.7.1 allows XSS via the vacancy name.5.4