Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-3906
HistoryNov 06, 2013 - 3:55 p.m.

CVE-2013-3906

2013-11-0615:55:00
CWE-94
[email protected]
web.nvd.nist.gov
942
In Wild
3
cve-2013-3906
microsoft
windows
vista
server
office
gdi
tiff
nvd

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%

JSON

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.

Social References

More

Related

checkpoint_advisories 1
thn 6
msrc 1
attackerkb 1
mskb 1
cisa_kev 1
nessus 2
zdt 2
symantec 1
openvas 3
metasploit 1
seebug 1
threatpost 3
packetstorm 1
prion 1
exploitdb 1
talosblog 1
securityvulns 1
cisa 1
myhack58 1
qualysblog 1
checkpoint_advisories
checkpoint_advisories
Microsoft Office Embedded TIFF Image Remote Code Execution (CVE-2013-3906)
2013-11-06 00:00:00
thn
thn
CVE-2013-3906 : Zero Day Vulnerability in Microsoft Graphics Component
2013-11-06 05:31:00
Microsoft set to deliver Patches for three Critical flaws, but no patch for Office Zero-day vulnerability
2013-11-09 17:15:00
Microsoft set to deliver Patches for three Critical flaws, but no patch for Office Zero-day vulnerability
2013-11-09 06:15:00
msrc
msrc
CVE-2013-3906: a graphics vulnerability exploited through Word documents
2013-11-05 08:00:00
attackerkb
attackerkb
Microsoft Tagged Image File Format Heap Overflow
2013-11-06 00:00:00
mskb
mskb
MS13-096: Vulnerability in Microsoft Graphics component could allow remote code execution: December 10, 2013
2013-12-10 00:00:00
cisa_kev
cisa_kev
Microsoft Graphics Component Memory Corruption Vulnerability
2022-02-15 00:00:00
nessus
nessus
MS KB2896666: Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (deprecated)
2013-11-06 00:00:00
MS13-096: Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (2908005)
2013-12-11 00:00:00
zdt
zdt
Microsoft Tagged Image File Format (TIFF) Integer Overflow
2013-11-27 00:00:00
Microsoft Tagged Image File Format (TIFF) Integer Overflow Vulnerability
2013-12-03 00:00:00
symantec
symantec
Multiple Microsoft Products CVE-2013-3906 Remote Code Execution Vulnerability
2013-11-05 00:00:00
openvas
openvas
Microsoft Lync Remote Code Execution Vulnerability (2908005)
2013-12-11 00:00:00
Microsoft Office Remote Code Execution Vulnerability (2908005)
2013-12-11 00:00:00
Microsoft Lync Attendee Remote Code Execution Vulnerability (2908005)
2013-12-11 00:00:00
metasploit
metasploit
MS13-096 Microsoft Tagged Image File Format (TIFF) Integer Overflow
2013-11-22 08:25:09
seebug
seebug
Microsoft Tagged Image File Format (TIFF) Integer Overflow
2014-07-01 00:00:00
threatpost
threatpost
11 China APTs Linked by Central Arms Dealer Infrastructure
2013-11-14 16:02:49
Attacks on New Microsoft Zero Day Using Multi-Stage Malware
2013-11-06 11:21:12
Cybercrooks Frame Targets by Planting Fabricated Digital Evidence
2022-02-11 19:57:34
packetstorm
packetstorm
Microsoft Tagged Image File Format (TIFF) Integer Overflow
2013-11-27 00:00:00
prion
prion
Design/Logic Flaw
2013-11-06 15:55:00
exploitdb
exploitdb
Microsoft - Tagged Image File Format '.TIFF' Integer Overflow (Metasploit)
2013-12-03 00:00:00
talosblog
talosblog
Modified Zyklon and plugins from India
2017-05-23 06:05:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2013-12-30 00:00:00
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%

JSON
Related for CVE-2013-3906
checkpoint_advisories1thn6msrc1attackerkb1mskb1cisa_kev1nessus2zdt2symantec1openvas3metasploit1seebug1threatpost3packetstorm1prion1exploitdb1talosblog1securityvulns1cisa1myhack581qualysblog1