Lucene search

K
nvd[email protected]NVD:CVE-2013-3181
HistoryAug 14, 2013 - 11:10 a.m.

CVE-2013-3181

2013-08-1411:10:36
CWE-119
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.507 Medium

EPSS

Percentile

97.5%

usp10.dll in the Unicode Scripts Processor in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka β€œUniscribe Font Parsing Engine Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_server_2003sp2
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.507 Medium

EPSS

Percentile

97.5%