NVD

Id
38979  
Name
CVE-2013-3129  
Description
Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT; GDI+ in Office 2003 SP3, 2007 SP3, and 2010 SP1; GDI+ in Visual Studio .NET 2003 SP1; and GDI+ in Lync 2010, 2010 Attendee, 2013, and Basic 2013 allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-09  
Modified Date
2016-10-19  
Seq
2013-3129  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199660 38979 CVE-2013-3129 oval:org.mitre.oval:def:17323  View
199661 38979 CVE-2013-3129 oval:org.mitre.oval:def:17341  View
199662 38979 CVE-2013-3129 MS13-052  View
199663 38979 CVE-2013-3129 MS13-053  View
199664 38979 CVE-2013-3129 MS13-054  View
199665 38979 CVE-2013-3129 TA13-190A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21679 JVNDB-2013-003254 複数の Microsoft 製品における任意のコードを実行される脆弱性 複数の Microsoft 製品には、任意のコードを実行される脆弱性が存在します。 CVE-2013-3129 63071 CVE-2013-3129 38979 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003254.html 2013-07-09 2013-07-24 View