Buffer overflow in Microsoft Internet Explorer

CVE-2013-2557

The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, as demonstrated against Adobe Flash Player by VUPEN during a Pwn2Own competition at CanSecWest 2013.

Vulnerability class: Buffer Overflow

EPSS: 0.109 (95.4th percentile) — read the EPSS interpretation.