Live › vulnerability › CVE-2013-3897
Go to dashboardA use-after-free bug in Internet Explorer's CDisplayPointer component lets a remote attacker run arbitrary code. It is listed as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Internet Explorer | vendor | – | – |
reg query "HKLM\SOFTWARE\Microsoft\Internet Explorer" /v svcVersion on WindowsEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JavaScript code that uses the onpropertychange event handler, as exploited in the wild in September and October 2013, aka "Internet Explorer Memory Corruption Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2013-3897")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.