Skip to content
NewA calmer, faster ZeroHour

Targeted exploit for CVE-2013

Kaspersky Securelistby @Securelist ()3 min read2
Analyze CVE-2013-3893 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2013-3893
Memory Corruption RCE in Microsoft Internet Explorer
—88%KEV—
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
ipv4192.192.91.6Server Region 211.23.103.221 Taiwan 210.177.74.45 Hong-Kong 192.192.91.6 Taiwan 61.63.47.27 Taiwan A brief analysis of one of the pa
ipv4210.177.74.45ad has been downloaded: Server Region 211.23.103.221 Taiwan 210.177.74.45 Hong-Kong 192.192.91.6 Taiwan 61.63.47.27 Taiwan A brief an
ipv4211.23.103.221ch the exploit’s payload has been downloaded: Server Region 211.23.103.221 Taiwan 210.177.74.45 Hong-Kong 192.192.91.6 Taiwan 61.63.47
ipv461.63.47.27.103.221 Taiwan 210.177.74.45 Hong-Kong 192.192.91.6 Taiwan 61.63.47.27 Taiwan A brief analysis of one of the payload’s variants (
md51b03e3de1ef3e7135fbf9d5ce7e7ccf6n A brief analysis of one of the payload’s variants ( md5 – 1b03e3de1ef3e7135fbf9d5ce7e7ccf6 ) has shown that the executable module has encrypted data i
md5bf891c72e4c29cfbe533756ea5685314n to disk using the following path: TempPathtmp.dll ( md5 – bf891c72e4c29cfbe533756ea5685314 ). The library exports the following functions: Functions e

From the original article

3 min read at securelist.com

In September Microsoft published information about a new Internet Explorer vulnerability – CVE-2013-3893. The vulnerability affects IE versions 6 through 11 for platforms from Windows XP through Windows 8. 1.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.