| Changed |
CPE Configuration |
AND
OR
*cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
OR
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
|
AND
OR
*cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
OR
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
|
| Changed |
CPE Configuration |
AND
OR
*cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
OR
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
|
AND
OR
*cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
OR
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
|
| Changed |
CPE Configuration |
AND
OR
*cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
OR
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
|
AND
OR
*cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
OR
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:r2:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:*:r2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
|
| Added |
CVSS V3.1 |
|
NIST AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| Added |
CWE |
|
NIST CWE-416
|
| Removed |
CWE |
NIST CWE-399
|
|
| Changed |
Reference Type |
http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html No Types Assigned
|
http://blog.fireeye.com/research/2012/12/council-foreign-relations-water-hole-attack-details.html Broken Link
|
| Changed |
Reference Type |
http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx No Types Assigned
|
http://blogs.technet.com/b/srd/archive/2012/12/29/new-vulnerability-affecting-internet-explorer-8-users.aspx Broken Link
|
| Changed |
Reference Type |
http://blogs.technet.com/b/srd/archive/2012/12/31/microsoft-quot-fix-it-quot-available-for-internet-explorer-6-7-and-8.aspx No Types Assigned
|
http://blogs.technet.com/b/srd/archive/2012/12/31/microsoft-quot-fix-it-quot-available-for-internet-explorer-6-7-and-8.aspx Broken Link
|
| Changed |
Reference Type |
http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/ No Types Assigned
|
http://eromang.zataz.com/2012/12/29/attack-and-ie-0day-informations-used-against-council-on-foreign-relations/ Third Party Advisory
|
| Changed |
Reference Type |
http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/ No Types Assigned
|
http://labs.alienvault.com/labs/index.php/2012/just-another-water-hole-campaign-using-an-internet-explorer-0day/ Broken Link
|
| Changed |
Reference Type |
http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html No Types Assigned
|
http://packetstormsecurity.com/files/119168/Microsoft-Internet-Explorer-CDwnBindInfo-Object-Use-After-Free.html Third Party Advisory, VDB Entry
|
| Changed |
Reference Type |
http://technet.microsoft.com/security/advisory/2794220 Vendor Advisory
|
http://technet.microsoft.com/security/advisory/2794220 Patch, Vendor Advisory
|
| Changed |
Reference Type |
http://www.kb.cert.org/vuls/id/154201 US Government Resource
|
http://www.kb.cert.org/vuls/id/154201 Third Party Advisory, US Government Resource
|
| Changed |
Reference Type |
http://www.us-cert.gov/cas/techalerts/TA13-008A.html US Government Resource
|
http://www.us-cert.gov/cas/techalerts/TA13-008A.html Third Party Advisory, US Government Resource
|
| Changed |
Reference Type |
http://www.us-cert.gov/cas/techalerts/TA13-015A.html US Government Resource
|
http://www.us-cert.gov/cas/techalerts/TA13-015A.html Third Party Advisory, US Government Resource
|
| Changed |
Reference Type |
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008 No Types Assigned
|
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-008 Patch, Vendor Advisory
|
| Changed |
Reference Type |
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb No Types Assigned
|
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_cbutton_uaf.rb Third Party Advisory
|
| Changed |
Reference Type |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361 No Types Assigned
|
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16361 Broken Link
|
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
