CVE-2013-3900 — Vulnetix

CVE-2013-3900 PUBLISHED KEV CVSS 5.5 MEDIUM

Une vulnérabilité a été découverte dans Microsoft Windows. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance. Il s'agit d'une mise à jour de l'avis [CERTFR-2013-664](/avis/CERTA-2013-AVI-664/).

EPSS 75.82% · 98.9th percentile

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C

EPSS Score

75.82%

98.9th percentile

Affected Products

Vendor	Product	Versions
Microsoft	Windows 11 version 22H2	N/A, N/A
microsoft	windows_10_1507	N/A, N/A
microsoft	windows_10_1607	N/A, *
Microsoft	Windows Server 2008 R2 Service Pack 1	N/A, *
microsoft	windows_10_21H2	N/A, N/A
Microsoft	Windows
Microsoft	Windows 11 version 22H3	N/A, N/A
microsoft	windows_server_2012	*, N/A, r2
microsoft	windows_11_21H2	*, N/A
Microsoft	Windows 11 Version 23H2	N/A, *
microsoft	windows_11_24H2	N/A, N/A
microsoft	windows_10_21h1
Microsoft	Windows Server 2008 Service Pack 2 (Server Core installation)	*, N/A
microsoft	windows_10_1809	N/A, *, N/A
Microsoft	Windows Server 2022	N/A, N/A
microsoft	windows_7
Microsoft	Windows Server 2019 (Server Core installation)	*, N/A
microsoft	windows_rt_8.1
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	N/A, N/A
microsoft	windows_server_2019	*, N/A, N/A

…and 40 more

Exploit Intelligence

https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1 (msrc)
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck. (github-poc)
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck. (github-poc)
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck. (github-poc)
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck. (github-poc)
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck. (github-poc)
PowerShell remediation for CVE-2013-3900 (WinVerifyTrust) / Tenable Plugin 166555 using EnableCertPaddingCheck. (github-poc)
End-to-end remediation of CVE-2013-3900 using PowerShell and Tenable. Demonstrates vulnerability identification, registry hardening, and automated verification in an Azure environment (github-poc)
End-to-end remediation of CVE-2013-3900 using PowerShell and Tenable. Demonstrates vulnerability identification, registry hardening, and automated verification in an Azure environment (github-poc)
End-to-end remediation of CVE-2013-3900 using PowerShell and Tenable. Demonstrates vulnerability identification, registry hardening, and automated verification in an Azure environment (github-poc)

…and 147 more exploits

Timeline

Jan 19, 1970 VulnCheck XDB Entry
Dec 11, 2013 CVE Published
Jul 29, 2014 VulnCheck KEV Exploitation
Jan 5, 2022 PoC Published
Jan 10, 2022 CISA KEV Added
Jan 21, 2022 VulnCheck KEV Exploitation
Jan 24, 2022 PoC Published
Feb 4, 2022 EPSS Score
Apr 26, 2022 VulnCheck KEV Exploitation
Nov 14, 2022 VulnCheck KEV Exploitation
Feb 16, 2023 VulnCheck KEV Exploitation
Mar 7, 2023 EPSS Score

References

Open in Interactive Console →