Patch Tuesday, March 2013
Microsoft's monthly security release, Tuesday, March 12, 2013. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
2 CVEs · 0 critical · 2 exploited · 2 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
2 CVEs · 0 critical · 2 exploited · 2 with public exploit code
- 8.8HighMar 11, 2013Microsoft Internet Explorer Memory corruptionCVE-2013-2551Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.Exploited74% likelyExploit codeExploit-DB · Metasploit
- 7.8HighMar 13, 2013Microsoft SilverlightCVE-2013-0074Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.Exploited79% likelyExploit codeExploit-DB · Metasploit
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.