{"id":"CVE-2013-7331","kind":"vulnerability","aliases":["CVE-2013-7331"],"related":[],"title":"Microsoft Internet Explorer: Microsoft Internet Explorer Information Disclosure Vulnerability","description":"The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.","summary":"Internet Explorer lets a web page query which resources are loaded into memory, which reveals whether anti-malware products are present. An attacker can use that to tailor malware to avoid detection.","severity":"medium","cvss":6.5,"epss":0.5021,"exploited":true,"exploited_at":"2022-05-25T00:00:00+00:00","products":[{"name":"Microsoft Internet Explorer","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","internet-explorer","vendor","windows"],"not_affected_if":["no-internet-explorer"],"how_to_check":null,"fix":"Apply Microsoft's updates for Internet Explorer per vendor instructions, as CISA requires; retire IE where possible.","status":"open","published_at":"2014-02-26T14:55:08+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:15:35+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T21:15:35Z","model":"claude-haiku-5-5","output":{"fix":"Apply Microsoft's updates for Internet Explorer per vendor instructions, as CISA requires; retire IE where possible.","reach":"internet","impact":"low","summary":"Internet Explorer lets a web page query which resources are loaded into memory, which reveals whether anti-malware products are present. An attacker can use that to tailor malware to avoid detection.","category":"vendor","who_cares":["internet-explorer","windows"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker learns installed anti-malware, enabling tailored evasion of defenses","analyst_note":"Confirm affected IE versions and the Microsoft advisory fix list via the CISA KEV entry and Microsoft's security update guide; sources give no version data.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["no-internet-explorer"],"user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000456,"input_tokens":2850,"output_tokens":342,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2013':11A,14A '-7331':12A,15A '2014':103C '8.1':65C 'activex':60C 'address':86C 'allow':68C 'anti':42B 'anti-malwar':41B 'attack':48B,70C 'avoid':56B 'code':90C 'control':61C 'cve':10A,13A 'demonstr':92C 'detect':57B 'determin':72C 'disclosur':8A 'earlier':67C 'error':89C 'examin':88C 'exist':74C 'exploit':19B,97C 'explor':3A,6A,22B,26B 'explorer':18A 'februari':102C 'hostnam':82C 'inform':7A 'internet':2A,5A,17A,21B,25B 'internet-explor':20B 'intranet':81C,84C 'ip':85C 'let':27B 'load':35B 'local':76C 'malwar':43B,54B 'memori':37B 'microsoft':1A,4A,16A,63C 'microsoft.xmldom':59C 'page':30B 'pathnam':77C,80C 'present':46B 'product':44B 'queri':31B 'remot':69C 'resourc':33B 'reveal':39B 'share':79C 'tailor':53B 'unc':78C 'url':95C 'use':50B 'vendor':23B 'vulner':9A 'web':29B 'whether':40B 'wild':100C 'window':24B,64C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2014-02-26T14:55:08+00:00","kev":{"dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2013-7331","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-7331","severity":null,"published_at":"2022-05-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:06+00:00","note":null},{"source":"epss","external_id":"CVE-2013-7331","url":"https://api.first.org/data/v1/epss?cve=CVE-2013-7331","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2013-7331","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-7331","severity":null,"published_at":"2014-02-26T14:55:08+00:00","modified_at":"2026-06-17T00:01:46+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}