Add the missing CVE reference

Was looking at all the 2013 exploit modules for missing CVE references
Land #2315, @wchen-r7's CVE coverage