Published: 10/07/2013 Updated: 12/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote malicious users to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of the Shift JIS encoding, leading to cross-domain scrolling events, aka "Shift JIS Character Encoding Vulnerability," a different vulnerability than CVE-2013-0015.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet explorer 8
microsoft internet explorer 9
microsoft internet explorer 10
microsoft internet explorer 6
microsoft internet explorer 7

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking i ...

CWE-79 http://www.us-cert.gov/ncas/alerts/TA13-190A https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17306 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055 https://nvd.nist.gov https://www.exploit-db.com/exploits/28187/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-3166

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect