deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-7016
Published: 2013-12-09
Description: The get_siz function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the expected sample separation, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7017
Published: 2013-12-09
Description: libavcodec/jpeg2000.c in FFmpeg before 2.1 allows remote attackers to cause a denial of service (invalid pointer dereference) or possibly have unspecified other impact via crafted JPEG2000 data.
CVSS Score: 6.8 (MEDIUM)
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7018
Published: 2013-12-09
Description: libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not ensure the use of valid code-block dimension values, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7019
Published: 2013-12-09
Description: The get_cox function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not properly validate the reduction factor, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7020
Published: 2013-12-09
Description: The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 does not properly enforce certain bit-count and colorspace constraints, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted FFV1 data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7021
Published: 2013-12-09
Description: The filter_frame function in libavfilter/vf_fps.c in FFmpeg before 2.1 does not properly ensure the availability of FIFO content, which allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact via crafted data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7022
Published: 2013-12-09
Description: The g2m_init_buffers function in libavcodec/g2meet.c in FFmpeg before 2.1 does not properly allocate memory for tiles, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Go2Webinar data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7023
Published: 2013-12-09
Description: The ff_combine_frame function in libavcodec/parser.c in FFmpeg before 2.1 does not properly handle certain memory-allocation errors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7024
Published: 2013-12-09
Description: The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.1 does not consider the component number in certain calculations, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG2000 data.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://ffmpeg.org/security.html; http://openwall.com/lists/oss-security/2013/11/26/7; http://openwall.com/lists/oss-security/2013/12/08/3
CVE: CVE-2013-7025
Published: 2013-12-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in ematStaticAlertTypes.jsp in the Alert Settings section in Dell SonicWALL Global Management System (GMS), Analyzer, and UMA EM5000 7.1 SP1 before Hotfix 134235 allow remote authenticated users to inject arbitrary web script or HTML via the (1) valfield_1 or (2) value_1 parameter to createNewThreshold.jsp.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0022.html; http://osvdb.org/100610; http://seclists.org/fulldisclosure/2013/Dec/32
CVE: CVE-2013-3929
Published: 2013-12-09
Description: Cross-site scripting (XSS) vulnerability in admin/editevent.php in CMS Made Simple (CMSMS) 1.11.9 allows remote authenticated users with the "Modify Events" permission to inject arbitrary web script or HTML via the handler parameter.
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/53920; http://secunia.com/advisories/53920
CVE: CVE-2013-5354
Published: 2013-12-09
Description: Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id or (2) tw_user_id parameter to signup.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/100603; http://secunia.com/advisories/53936; http://secunia.com/secunia_research/2013-10
CVE: CVE-2013-5355
Published: 2013-12-09
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change configuration settings or (2) create new administrative users via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/100608; http://secunia.com/advisories/53936; http://secunia.com/secunia_research/2013-11
CVE: CVE-2013-6039
Published: 2013-12-09
Description: Multiple cross-site scripting (XSS) vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to (1) admin/hostdependencies.php, (2) admin/hosts.php, or other unspecified pages that allow search input, related to the search functionality in functions/content_class.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/fulldisclosure/2013-12/0031.html; http://jvn.jp/cert/JVNVU92648323/index.html; http://osvdb.org/100612
CVE: CVE-2013-6985
Published: 2013-12-09
Description: SQL injection vulnerability in m_worklog/log_searchday.jsp in Enorth Webpublisher CMS, possibly 5.0 and earlier, allows remote attackers to execute arbitrary SQL commands via the thisday parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2013/Dec/35; http://www.securityfocus.com/bid/64110; http://seclists.org/fulldisclosure/2013/Dec/35
CVE: CVE-2013-2929
Published: 2013-12-09
Description: The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted application, related to kernel/ptrace.c and arch/ia64/include/asm/processor.h.
CVSS Score: 3.3 (LOW)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d049f74f2dbe71354d43d393ac3a[PII_REDACTED]8; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html
CVE: CVE-2013-2930
Published: 2013-12-09
Description: The perf_trace_event_perm function in kernel/trace/trace_event_perf.c in the Linux kernel before 3.12.2 does not properly restrict access to the perf subsystem, which allows local users to enable function tracing via a crafted application.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=12ae030d54ef250706da5642fc7697cc60ad0df7; http://rhn.redhat.com/errata/RHSA-2014-0100.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2
CVE: CVE-2013-4270
Published: 2013-12-09
Description: The net_ctl_permissions function in net/sysctl_net.c in the Linux kernel before 3.11.5 does not properly determine uid and gid values, which allows local users to bypass intended /proc/sys/net restrictions via a crafted application.
CVSS Score: 3.6 (LOW)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=2433c8f094a008895e66f25bd1773cdb01c91d01; http://rhn.redhat.com/errata/RHSA-2014-0100.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.5
CVE: CVE-2013-6180
Published: 2013-12-09
Description: EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2013-12/0034.html; http://www.securitytracker.com/id/1029446; http://archives.neohapsis.com/archives/bugtraq/2013-12/0034.html
CVE: CVE-2013-6356
Published: 2013-12-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue because of dependency on the victim's direct involvement in modifying the Windows registry to enable the attack.  Notes: none
CVE: CVE-2013-6427
Published: 2013-12-09
Description: upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing (HPLIP) 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-updates/2014-01/msg00087.html; http://openwall.com/lists/oss-security/2013/12/05/2; http://www.debian.org/security/2013/dsa-2829
CVE: CVE-2013-6431
Published: 2013-12-09
Description: The fib6_add function in net/ipv6/ip6_fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capability for an IPv6 SIOCADDRT ioctl call.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ae7b4e1f213aa659aedf9c6ecad0bf5f0476e1e2; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html; http://rhn.redhat.com/errata/RHSA-2014-0100.html
CVE: CVE-2013-6432
Published: 2013-12-09
Description: The ping_recvmsg function in net/ipv4/ping.c in the Linux kernel before 3.12.4 does not properly interact with read system calls on ping sockets, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging unspecified privileges to execute a crafted application.
CVSS Score: 4.6 (MEDIUM)
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cf970c002d270c36202bd5b9c2804d3097a52da0; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00003.html; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.4
CVE: CVE-2013-7026
Published: 2013-12-09
Description: Multiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other impact via a crafted application that uses shmctl IPC_RMID operations in conjunction with other shm system calls.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a399b29dfbaaaf91162b2dc5a5875dd51bbfa2a1; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2; http://www.ubuntu.com/usn/USN-2070-1
CVE: CVE-2013-7027
Published: 2013-12-09
Description: The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains any data outside of the header, which might allow attackers to cause a denial of service (buffer over-read) via a crafted header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f5563318ff1bde15b10e736e97ffce13be08bc1a; http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00002.html; http://lists.opensuse.org/opensuse-updates/2014-02/msg00045.html
CVE: CVE-2013-4408
Published: 2013-12-10
Description: Heap-based buffer overflow in the dcerpc_read_ncacn_packet_done function in librpc/rpc/dcerpc_util.c in winbindd in Samba 3.x before 3.6.22, 4.0.x before 4.0.13, and 4.1.x before 4.1.3 allows remote AD domain controllers to execute arbitrary code via an invalid fragment length in a DCE-RPC packet.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136864.html; http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134717.html; http://lists.opensuse.org/opensuse-security-announce/2014-01/msg00002.html
CVE: CVE-2013-5447
Published: 2013-12-10
Description: Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://packetstormsecurity.com/files/124658; http://www-01.ibm.com/support/docview.wss?uid=swg1LO78184; http://www-01.ibm.com/support/docview.wss?uid=swg21657500
CVE: CVE-2013-6708
Published: 2013-12-10
Description: Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui60889.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/100730; http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6708; http://tools.cisco.com/security/center/viewAlert.x?alertId=32094
CVE: CVE-2013-2215
Published: 2013-12-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2013-3622
Published: 2013-12-10
Description: Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.
CVSS Score: 9.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/64259; https://community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilities; https://support.citrix.com/article/CTX216642
CVE: CVE-2013-3623
Published: 2013-12-10
Description: Multiple stack-based buffer overflows in cgi/close_window.cgi in the web interface in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the (1) sess_sid or (2) ACT parameter.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/29666; http://www.securityfocus.com/bid/63775; http://www.supermicro.com/products/nfo/files/IPMI/CVE_Update.pdf
CVE: CVE-2013-6224
Published: 2013-12-10
Description: Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) unspecified vectors to the admins visitor information panel, or (3) a text message in a chat session, which is saved in the archive section.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/100399; http://osvdb.org/100401; http://osvdb.org/100402
CVE: CVE-2013-3710
Published: 2013-12-10
Description: SUSE Lifecycle Management Server (SLMS) before 1.3.7 does not generate a new secret key when the service starts, which allows remote attackers to defeat intended cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://osvdb.org/100653; https://bugzilla.novell.com/show_bug.cgi?id=852101; https://www.suse.com/support/update/announcement/2013/suse-su-20131813-1.html
CVE: CVE-2013-6237
Published: 2013-12-10
Description: The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://osvdb.org/100512; http://packetstormsecurity.com/files/124274/ISL-Light-Desktop-3.5.4-Information-Disclosure.html; http://seclists.org/fulldisclosure/2013/Dec/14
CVE: CVE-2013-6840
Published: 2013-12-10
Description: Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/56010; http://www.securityfocus.com/bid/64153; https://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-568732.pdf
CVE: CVE-2013-7042
Published: 2013-12-10
Description: SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/100652; https://bugzilla.novell.com/show_bug.cgi?id=852101; https://exchange.xforce.ibmcloud.com/vulnerabilities/89897
CVE: CVE-2012-3047
Published: 2013-12-10
Description: Cross-site scripting (XSS) vulnerability in the web-wizard setup page on Cisco Scientific Atlanta D20 and D30 cable modems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://tools.cisco.com/security/center/viewAlert.x?alertId=26036; http://tools.cisco.com/security/center/viewAlert.x?alertId=26036
CVE: CVE-2013-5404
Published: 2013-12-10
Description: Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://www-01.ibm.com/support/docview.wss?uid=swg21653689; https://exchange.xforce.ibmcloud.com/vulnerabilities/87318; http://www-01.ibm.com/support/docview.wss?uid=swg21653689
CVE: CVE-2013-7043
Published: 2013-12-10
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via the Password parameter to goform/RgSecurity; (2) reboot the device via the Restart parameter to goform/restart; (3) modify Wi-Fi settings, as demonstrated by the WpaPreSharedKey parameter to goform/wlanSecurity; or (4) modify parental controls via the ParentalPassword parameter to goform/RgParentalBasic.
CVSS Score: 8.3 (HIGH)
CWE: CWE-352
References: http://www.exploit-db.com/exploits/29927/; https://exchange.xforce.ibmcloud.com/vulnerabilities/89654; http://www.exploit-db.com/exploits/29927/
CVE: CVE-2013-3878
Published: 2013-12-11
Description: Stack-based buffer overflow in the LRPC client in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges by operating an LRPC server that sends a crafted LPC port message, aka "LRPC Client Buffer Overrun Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-102; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-102
CVE: CVE-2013-3899
Published: 2013-12-11
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-101
CVE: CVE-2013-3900
Published: 2013-12-11
Description: Why is Microsoft republishing a CVE from 2013?
We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, except for clarifications about how to configure the EnableCertPaddingCheck registry value, the information herein remains unchanged from the original text published on December 10, 2013,
Microsoft does not plan to enforce the stricter verification behavior as a default functionality on supported releases of Microsoft Windows. This behavior remains available as an opt-in feature via reg key setting, and is available on supported editions of Windows released since December 10, 2013. This includes all currently supported versions of Windows 10 and Windows 11. The supporting code for this reg key was incorporated at the time of release for Windows 10 and Windows 11, so no security update is required; however, the reg key must be set. See the Security Updates table for the list of affected software.
Vulnerability Description
A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable (PE) files. An anonymous attacker could exploit the vulnerability by modifying an existing signed executable file to leverage unverified portions of the file in such a way as to add malicious code to the file without invalidating the signature. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Exploitation of this vulnerability requires that a user or application run or install a specially crafted, signed PE file. An attacker could modify an... See more at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347, CWE-347, CWE-347
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900; http://blogs.technet.com/b/srd/archive/2013/12/10/ms13-098-update-to-enhance-the-security-of-authenticode.aspx; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-098