ID CVE-2013-1313
Summary Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted RTF document, aka "OLE Automation Remote Code Execution Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 12-10-2018 - 22:04)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
msbulletin via4
  • bulletin_id MS13-037
    bulletin_url
    date 2013-05-14T00:00:00
    impact Remote Code Execution
    knowledgebase_id 2829530
    knowledgebase_url
    severity Critical
    title Cumulative Security Update for Internet Explorer
  • bulletin_id MS13-020
    bulletin_url
    date 2013-02-12T00:00:00
    impact Remote Code Execution
    knowledgebase_id 2802968
    knowledgebase_url
    severity Critical
    title Vulnerability in OLE Automation Could Allow Remote Code Execution
oval via4
accepted 2013-06-10T04:00:56.665-04:00
class vulnerability
contributors
  • name SecPod Team
    organization SecPod Technologies
  • name Pooja Shetty
    organization SecPod Technologies
  • name Pooja Shetty
    organization SecPod Technologies
definition_extensions
comment Microsoft Windows XP (x86) SP3 is installed
oval oval:org.mitre.oval:def:5631
description Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted RTF document, aka "OLE Automation Remote Code Execution Vulnerability."
family windows
id oval:org.mitre.oval:def:16385
status accepted
submitted 2013-02-15T08:51:55
title Microsoft OLE Automation Remote Code Execution Vulnerability - MS13-020
version 77
refmap via4
cert TA13-043B
Last major update 12-10-2018 - 22:04
Published 13-02-2013 - 12:04
Last modified 12-10-2018 - 22:04
Back to Top