Vulnerability record · CVE-2013-3184 · published 14 August 2013
CVE-2013-3184: Internet Explorer Memory Corruption Remote Code Execution
Microsoft · Internet Explorer
Microsoft Internet Explorer 7 through 10 contains a memory corruption flaw (CWE-119) that can be triggered by a crafted web site. Successful exploitation allows remote code execution or denial of service. The vulnerability affects a broad range of IE versions and carries a high CVSS v2 score of 9.3.
Description
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
AV:N/AC:M/Au:N/C:C/I:C/A:C
Automated analysis
high priorityHigh CVSS score and high EPSS percentile indicate significant risk, though no active exploitation is confirmed in KEV.
What it is
Microsoft Internet Explorer 7 through 10 contains a memory corruption flaw (CWE-119) that can be triggered by a crafted web site. Successful exploitation allows remote code execution or denial of service. The vulnerability affects a broad range of IE versions and carries a high CVSS v2 score of 9.3.
Impact
An attacker can execute arbitrary code in the context of the logged-on user or crash the browser, leading to full system compromise or denial of service.
Attack surface
Reached by a remote attacker hosting a malicious web page that the victim visits; no authentication is required, but user interaction (browsing to the page) is needed.
Exploitation
Not listed in CISA KEV and no ransomware associations are documented; EPSS probability is 0.584 (99th percentile), indicating high predicted exploitation activity, though no public exploit references are tagged in the record.
What to do
- Apply Microsoft security update MS13-059 immediately.
- Upgrade to a supported version of Internet Explorer or a modern browser.
- Disable or restrict legacy IE versions (7–10) where possible.
- Enforce network-level filtering and browser hardening to block known malicious sites.
- Educate users about the risks of visiting untrusted web sites.
Detection
- Monitor for crashes or unexpected process terminations of iexplore.exe.
- Use endpoint detection to flag memory corruption exploitation patterns in IE processes.
- Review web proxy logs for access to known malicious or suspicious domains.
- Correlate events with Microsoft security bulletin MS13-059 patch status.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
Track CVE-2013-3184 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2013-3184), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.