Lucene search

K
cve[email protected]CVE-2013-3157
HistorySep 11, 2013 - 2:03 p.m.

CVE-2013-3157

2013-09-1114:03:48
CWE-119
web.nvd.nist.gov
102
microsoft access
remote code execution
denial of service
memory corruption
cve-2013-3157
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.872 High

EPSS

Percentile

98.6%

Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka “Access Memory Corruption Vulnerability,” a different vulnerability than CVE-2013-3155.

Affected configurations

NVD
Node
microsoftaccessMatch2007sp3
OR
microsoftaccessMatch2010sp1x64
OR
microsoftaccessMatch2010sp1x86
OR
microsoftaccessMatch2010sp2x64
OR
microsoftaccessMatch2010sp2x86
OR
microsoftaccessMatch2013x64
OR
microsoftaccessMatch2013x86

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

High

0.872 High

EPSS

Percentile

98.6%