ID |
CVE-2013-3128
|
Summary |
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability." |
References |
|
Vulnerable Configurations |
-
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*
-
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*
-
cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x64:*
-
cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x86:*
-
cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*
-
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*
-
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*
-
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
-
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
-
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
-
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
-
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*
-
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
-
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:.net_framework:4.0:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:4.0:-:*:*:*:*:*:*
-
cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*
|
CVSS |
Base: | 9.3 (as of 08-12-2020 - 15:11) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-noinfo |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
MEDIUM |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
COMPLETE |
COMPLETE |
COMPLETE |
|
cvss-vector
via4
|
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
msbulletin
via4
|
bulletin_id | MS13-081 | bulletin_url | | date | 2013-10-08T00:00:00 | impact | Remote Code Execution | knowledgebase_id | 2870008 | knowledgebase_url | | severity | Critical | title | Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution |
bulletin_id | MS13-082 | bulletin_url | | date | 2013-10-08T00:00:00 | impact | Remote Code Execution | knowledgebase_id | 2878890 | knowledgebase_url | | severity | Critical | title | Vulnerabilities in .NET Framework Could Allow Remote Code Execution |
|
oval
via4
|
accepted | 2014-08-18T04:02:03.737-04:00 | class | vulnerability | contributors | name | SecPod Team | organization | SecPod Technologies |
name | Sharath S | organization | SecPod Technologies |
name | Maria Kedovskaya | organization | ALTX-SOFT |
name | Bhavya K | organization | SecPod Technologies |
name | Bhavya K | organization | SecPod Technologies |
name | Maria Mikhno | organization | ALTX-SOFT |
name | Maria Mikhno | organization | ALTX-SOFT |
| definition_extensions | comment | Microsoft .NET Framework 3.0 SP2 is installed | oval | oval:org.mitre.oval:def:15312 |
comment | Microsoft Windows XP (32-bit) is installed | oval | oval:org.mitre.oval:def:1353 |
comment | Microsoft Windows XP x64 is installed | oval | oval:org.mitre.oval:def:15247 |
comment | Microsoft Windows Server 2003 (32-bit) is installed | oval | oval:org.mitre.oval:def:1870 |
comment | Microsoft Windows Server 2003 (x64) is installed | oval | oval:org.mitre.oval:def:730 |
comment | Microsoft Windows Vista (32-bit) is installed | oval | oval:org.mitre.oval:def:1282 |
comment | Microsoft Windows Vista x64 Edition is installed | oval | oval:org.mitre.oval:def:2041 |
comment | Microsoft Windows Server 2008 (32-bit) is installed | oval | oval:org.mitre.oval:def:4870 |
comment | Microsoft Windows Server 2008 (64-bit) is installed | oval | oval:org.mitre.oval:def:5356 |
comment | Microsoft .NET Framework 3.5 SP1 is installed | oval | oval:org.mitre.oval:def:12542 |
comment | Microsoft Windows 7 (32-bit) is installed | oval | oval:org.mitre.oval:def:6165 |
comment | Microsoft Windows 7 x64 Edition is installed | oval | oval:org.mitre.oval:def:5950 |
comment | Microsoft Windows Server 2008 R2 x64 Edition is installed | oval | oval:org.mitre.oval:def:6438 |
comment | Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed | oval | oval:org.mitre.oval:def:5954 |
comment | Microsoft .NET Framework 4.0 is installed | oval | oval:org.mitre.oval:def:6749 |
comment | Microsoft Windows XP (32-bit) is installed | oval | oval:org.mitre.oval:def:1353 |
comment | Microsoft Windows XP x64 is installed | oval | oval:org.mitre.oval:def:15247 |
comment | Microsoft Windows Server 2003 (32-bit) is installed | oval | oval:org.mitre.oval:def:1870 |
comment | Microsoft Windows Server 2003 (x64) is installed | oval | oval:org.mitre.oval:def:730 |
comment | Microsoft Windows Server 2003 (ia64) Gold is installed | oval | oval:org.mitre.oval:def:396 |
comment | Microsoft Windows Vista (32-bit) is installed | oval | oval:org.mitre.oval:def:1282 |
comment | Microsoft Windows Vista x64 Edition is installed | oval | oval:org.mitre.oval:def:2041 |
comment | Microsoft Windows Server 2008 (32-bit) is installed | oval | oval:org.mitre.oval:def:4870 |
comment | Microsoft Windows Server 2008 (64-bit) is installed | oval | oval:org.mitre.oval:def:5356 |
comment | Microsoft Windows Server 2008 (ia-64) is installed | oval | oval:org.mitre.oval:def:5667 |
comment | Microsoft .NET Framework 4.5 is installed | oval | oval:org.mitre.oval:def:15925 |
comment | Microsoft Windows Vista (32-bit) is installed | oval | oval:org.mitre.oval:def:1282 |
comment | Microsoft Windows Vista x64 Edition is installed | oval | oval:org.mitre.oval:def:2041 |
comment | Microsoft Windows Server 2008 (32-bit) is installed | oval | oval:org.mitre.oval:def:4870 |
comment | Microsoft Windows Server 2008 (64-bit) is installed | oval | oval:org.mitre.oval:def:5356 |
comment | Microsoft .NET Framework 3.5 SP1 is installed | oval | oval:org.mitre.oval:def:12542 |
comment | Microsoft Windows 8 (x86) is installed | oval | oval:org.mitre.oval:def:14914 |
comment | Microsoft Windows 8 (x64) is installed | oval | oval:org.mitre.oval:def:15571 |
comment | Microsoft Windows Server 2012 (64-bit) is installed | oval | oval:org.mitre.oval:def:15585 |
comment | Microsoft Windows XP (32-bit) is installed | oval | oval:org.mitre.oval:def:1353 |
comment | Microsoft Windows XP x64 is installed | oval | oval:org.mitre.oval:def:15247 |
comment | Microsoft Windows Server 2003 (ia64) Gold is installed | oval | oval:org.mitre.oval:def:396 |
comment | Microsoft Windows Server 2003 (32-bit) is installed | oval | oval:org.mitre.oval:def:1870 |
comment | Microsoft Windows Server 2003 (x64) is installed | oval | oval:org.mitre.oval:def:730 |
comment | Microsoft Windows Vista (32-bit) is installed | oval | oval:org.mitre.oval:def:1282 |
comment | Microsoft Windows Vista x64 Edition is installed | oval | oval:org.mitre.oval:def:2041 |
comment | Microsoft Windows Server 2008 (32-bit) is installed | oval | oval:org.mitre.oval:def:4870 |
comment | Microsoft Windows Server 2008 (64-bit) is installed | oval | oval:org.mitre.oval:def:5356 |
comment | Microsoft Windows Server 2008 (ia-64) is installed | oval | oval:org.mitre.oval:def:5667 |
comment | Microsoft Windows 7 (32-bit) is installed | oval | oval:org.mitre.oval:def:6165 |
comment | Microsoft Windows 7 x64 Edition is installed | oval | oval:org.mitre.oval:def:5950 |
comment | Microsoft Windows Server 2008 R2 x64 Edition is installed | oval | oval:org.mitre.oval:def:6438 |
comment | Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed | oval | oval:org.mitre.oval:def:5954 |
comment | Microsoft Windows 8 (x86) is installed | oval | oval:org.mitre.oval:def:14914 |
comment | Microsoft Windows 8 (x64) is installed | oval | oval:org.mitre.oval:def:15571 |
comment | Microsoft Windows Server 2012 (64-bit) is installed | oval | oval:org.mitre.oval:def:15585 |
| description | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability." | family | windows | id | oval:org.mitre.oval:def:18847 | status | accepted | submitted | 2013-10-15T15:40:52 | title | OpenType Font Parsing Vulnerability (CVE-2013-3128) - MS13-081, MS13-082 | version | 87 |
|
refmap
via4
|
|
Last major update |
08-12-2020 - 15:11 |
Published |
09-10-2013 - 14:53 |
Last modified |
08-12-2020 - 15:11 |