NVD

Id
39647  
Name
CVE-2013-3940  
Description
Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image in a Windows Write (.wri) document, which is not properly handled in WordPad, aka "Graphics Device Interface Integer Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-11-12  
Modified Date
2013-12-19  
Seq
2013-3940  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
201795 39647 CVE-2013-3940 oval:org.mitre.oval:def:18722  View
201796 39647 CVE-2013-3940 MS13-089  View
201797 39647 CVE-2013-3940 TA13-317A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23507 JVNDB-2013-005082 複数の Microsoft Windows 製品の Graphics Device Interface における整数オーバーフローの脆弱性 複数の Microsoft Windows 製品の Graphics Device Interface (GDI) には、整数オーバーフローの脆弱性が存在します。 CVE-2013-3940 63882 CVE-2013-3940 39647 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005082.html 2013-11-12 2013-11-22 View