Lucene search
Microsoft Security Response CenterMSRC:9182E1106811F7293C8ADD187632A243HistoryNov 05, 2013 - 8:00 a.m.
CVE-2013-3906: a graphics vulnerability exploited through Word documents
2013-11-0508:00:00
Microsoft Security Response Center
msrc.microsoft.com
12
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.97 High
EPSS
Percentile
99.8%
Recently we become aware of a vulnerability of a Microsoft graphics component that is actively exploited in targeted attacks using crafted Word documents sent by email. Today we are releasing Security Advisory 2896666 which includes a proactive Fix it workaround for blocking this attack while we are working on the final update.
Related
mskb
mskb
cisa_kev
cisa_kev
Microsoft Graphics Component Memory Corruption Vulnerability
2022-02-15 00:00:00
thn
thn
cvelist
cvelist
CVE-2013-3906
2013-11-06 11:00:00
attackerkb
attackerkb
Microsoft Tagged Image File Format Heap Overflow
2013-11-06 00:00:00
symantec
symantec
openvas
openvas
Microsoft Lync Remote Code Execution Vulnerability (2908005)
2013-12-11 00:00:00
Microsoft Office Remote Code Execution Vulnerability (2908005)
2013-12-11 00:00:00
Microsoft Lync Attendee Remote Code Execution Vulnerability (2908005)
2013-12-11 00:00:00
metasploit
metasploit
MS13-096 Microsoft Tagged Image File Format (TIFF) Integer Overflow
2013-11-22 08:25:09
nessus
nessus
zdt
zdt
Microsoft Tagged Image File Format (TIFF) Integer Overflow
2013-11-27 00:00:00
Microsoft Tagged Image File Format (TIFF) Integer Overflow Vulnerability
2013-12-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Embedded TIFF Image Remote Code Execution (CVE-2013-3906)
2013-11-06 00:00:00
seebug
seebug
Microsoft Tagged Image File Format (TIFF) Integer Overflow
2014-07-01 00:00:00
nvd
nvd
CVE-2013-3906
2013-11-06 15:55:05
cve
cve
CVE-2013-3906
2013-11-06 15:55:05
threatpost
threatpost
11 China APTs Linked by Central Arms Dealer Infrastructure
2013-11-14 16:02:49
Attacks on New Microsoft Zero Day Using Multi-Stage Malware
2013-11-06 11:21:12
Cybercrooks Frame Targets by Planting Fabricated Digital Evidence
2022-02-11 19:57:34
packetstorm
packetstorm
Microsoft Tagged Image File Format (TIFF) Integer Overflow
2013-11-27 00:00:00
prion
prion
Design/Logic Flaw
2013-11-06 15:55:00
exploitdb
exploitdb
talosblog
talosblog
Modified Zyklon and plugins from India
2017-05-23 06:05:00
cisa
cisa
CISA Adds Nine Known Exploited Vulnerabilities to Catalog
2022-02-15 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2013-12-30 00:00:00
myhack58
myhack58
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.97 High
EPSS
Percentile
99.8%
Related for MSRC:9182E1106811F7293C8ADD187632A243