Live › vulnerability › CVE-2013-7331
Go to dashboardInternet Explorer lets a web page query which resources are loaded into memory, which reveals whether anti-malware products are present. An attacker can use that to tailor malware to avoid detection.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Internet Explorer | vendor | – | – |
Unknown from the sources.
Apply Microsoft's updates for Internet Explorer per vendor instructions, as CISA requires; retire IE where possible.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.
This page as .md · .json · in your agent: get_signal("CVE-2013-7331")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.