NVD

Id
39632  
Name
CVE-2013-3918  
Description
The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted web page that is accessed by Internet Explorer, as exploited in the wild in November 2013, aka "InformationCardSigninHelper Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-11-12  
Modified Date
2013-12-19  
Seq
2013-3918  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
201760 39632 CVE-2013-3918 http://blogs.technet.com/b/msrc/archive/2013/11/11/activex-control-issue-being-addressed-in-update-tuesday.aspx  View
201761 39632 CVE-2013-3918 oval:org.mitre.oval:def:19089  View
201762 39632 CVE-2013-3918 MS13-090  View
201763 39632 CVE-2013-3918 http://www.darkreading.com/vulnerability/new-ie-vulnerability-found-in-the-wild-s/240163814/  View
201764 39632 CVE-2013-3918 http://www.fireeye.com/blog/technical/2013/11/new-ie-zero-day-found-in-watering-hole-attack.html  View
201765 39632 CVE-2013-3918 TA13-317A  View
201766 39632 CVE-2013-3918 https://isc.sans.edu/forums/diary/16985  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23484 JVNDB-2013-005059 Microsoft Internet Explorer 7 から 10 の不特定の ActiveX コントロールにおける任意のコードを実行される脆弱性 Microsoft Internet Explorer 7 から 10 の不特定の ActiveX コントロールには、任意のコードを実行される、またはサービス運用妨害 (out-of-bounds write) 状態にされる脆弱性が存在します。 CVE-2013-3918 63860 CVE-2013-3918 39632 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005059.html 2013-11-12 2013-11-22 View