{"vulnerability": "CVE-2013-3897", "sightings": [{"uuid": "8d6295da-4dd3-4483-9cb2-e114037acd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "MISP/52551442-68dc-4e84-9325-42b5950d2109", "content": "", "creation_timestamp": "2013-10-09T08:31:46.000000Z"}, {"uuid": "5327850c-fd16-45dd-afa7-00346ced9453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "MISP/5257e4a4-a694-4701-8cc4-42bdac1d4fa4", "content": "", "creation_timestamp": "2013-10-11T11:46:13.000000Z"}, {"uuid": "876e84ae-0119-4868-82c2-4db415178ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "322dc01d-1fd9-41bc-8b3b-bae4e96f598e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971291", "content": "", "creation_timestamp": "2024-12-24T20:27:07.343554Z"}, {"uuid": "9b65e4ee-62fd-41d5-9df8-419a8fada1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "75e2df38-06ed-403d-85ac-f4cb88771c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:04.000000Z"}, {"uuid": "8089abe8-357c-452f-92a6-55b1786c24e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:18.000000Z"}, {"uuid": "ed569853-571c-4dc6-aee0-8a5f5c71e757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms13_080_cdisplaypointer.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "18fa1d92-cb6f-4d43-8bf4-f39725ad78bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:56.000000Z"}, {"uuid": "0929fcab-d596-487b-b6f5-02642b465f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2013-3897", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96c4189e-b9a0-43c3-9790-aef692562991", "content": "", "creation_timestamp": "2026-02-02T12:28:19.266009Z"}, {"uuid": "a723de9f-d806-45c4-9a1b-4861233f39c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-3897", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/28974", "content": "", "creation_timestamp": "2013-10-15T00:00:00.000000Z"}, {"uuid": "2837c102-6b44-4e2d-b112-9b11b83d164d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "exploited", "source": "https://t.me/arpsyndicate/1172", "content": "#ExploitObserverAlert\n\nCVE-2013-3897\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2013-3897. Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka \"Internet Explorer Memory Corruption Vulnerability.\"\n\nFIRST-EPSS: 0.964320000\nNVD-IS: 10.0\nNVD-ES: 8.6", "creation_timestamp": "2023-12-04T09:52:03.000000Z"}, {"uuid": "ba678eff-6f1f-4ff2-8976-f6a3bdbc71c6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2dc55a31-7be6-447d-9af6-96c51f477f2b", "content": "", "creation_timestamp": "2026-06-19T12:47:31.992479Z"}, {"uuid": "38e95b63-51fe-4b04-b67a-abb0e90a4baf", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/47af0e87-1ccb-416e-9683-06682159ef58", "content": "", "creation_timestamp": "2026-06-23T14:05:00.130697Z"}, {"uuid": "d9e9bdf6-ffa1-4f9a-8807-c48765f7d260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3897", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms13_080_cdisplaypointer.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Unknown\", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Microsoft Internet Explorer. It was originally\\n          found being exploited in the wild targeting Japanese and Korean IE8 users on Windows XP,\\n          around the same time frame as CVE-2013-3893, except this was kept out of the public eye by\\n          multiple research companies and the vendor until the October patch release.\\n\\n          This issue is a use-after-free vulnerability in CDisplayPointer via the use of a\\n          \\\"onpropertychange\\\" event handler. To set up the appropriate buggy conditions, we first craft\\n          the DOM tree in a specific order, where a CBlockElement comes after the CTextArea element.\\n          If we use a select() function for the CTextArea element, two important things will happen:\\n          a CDisplayPointer object will be created for CTextArea, and it will also trigger another\\n          event called \\\"onselect\\\". The \\\"onselect\\\" event will allow us to set up for the actual event\\n          handler we want to abuse - the \\\"onpropertychange\\\" event. Since the CBlockElement is a child\\n          of CTextArea, if we do a node swap of CBlockElement in \\\"onselect\\\", this will trigger\\n          \\\"onpropertychange\\\".  During \\\"onpropertychange\\\" event handling, a free of the CDisplayPointer\\n          object can be forced by using an \\\"Unselect\\\" (other approaches also apply), but a reference\\n          of this freed memory will still be kept by CDoc::ScrollPointerIntoView, specifically after\\n          the CDoc::GetLineInfo call, because it is still trying to use that to update\\n          CDisplayPointer's position. When this invalid reference arrives in QIClassID, a crash\\n          finally occurs due to accessing the freed memory. By controlling this freed memory, it is\\n          possible to achieve arbitrary code execution under the context of the user.\", \"disclosure_date\": \"2013-10-08\", \"fullname\": \"exploit/windows/browser/ms13_080_cdisplaypointer\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms13_080_cdisplaypointer.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/ms13_080_cdisplaypointer\", \"references\": [\"CVE-2013-3897\", \"OSVDB-98207\", \"MSB-MS13-080\", \"URL-http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulnerabilities-under-limited-targeted-attacks.aspx\", \"URL-http://jsunpack.jeek.org/?report=847afb154a4e876d61f93404842d9a1b93a774fb\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3\", \"IE 8 on Windows 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:10.730327Z"}]}