NVD

Id
39038  
Name
CVE-2013-3195  
Description
The DSA_InsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted value in an argument to an ASP.NET web application, aka "Comctl32 Integer Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-10-09  
Modified Date
2013-12-19  
Seq
2013-3195  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199842 39038 CVE-2013-3195 http://blogs.technet.com/b/srd/archive/2013/10/08/assessing-risk-for-the-october-2013-security-updates.aspx  View
199843 39038 CVE-2013-3195 oval:org.mitre.oval:def:18715  View
199844 39038 CVE-2013-3195 MS13-083  View
199845 39038 CVE-2013-3195 TA13-288A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22981 JVNDB-2013-004556 複数の Microsoft Windows 製品の Windows コモンコントロールライブラリにおける任意のコードを実行される脆弱性 複数の Microsoft Windows 製品の Windows コモンコントロールライブラリの Comctl32.dll 内の DSA_InsertItem 関数は、メモリの割り当てを適切に行わないため、任意のコードを実行される脆弱性が存在します。 CVE-2013-3195 63137 CVE-2013-3195 39038 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004556.html 2013-10-08 2013-10-22 View