NVD

Id
40517  
Name
CVE-2013-5057  
Description
hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December 2013, aka "HXDS ASLR Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-12-10  
Modified Date
2013-12-11  
Seq
2013-5057  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205498 40517 CVE-2013-5057 http://blogs.technet.com/b/srd/archive/2013/12/09/ms13-106-another-aslr-bypass-is-gone.aspx  View
205499 40517 CVE-2013-5057 MS13-106  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23890 JVNDB-2013-005465 Microsoft Office 2007 および 2010 の hxds.dll における任意のコードを実行される脆弱性 Microsoft Office 2007 および 2010 の hxds.dll は、ASLR 保護メカニズムを実装しないため、任意のコードを実行される脆弱性が存在します。 CVE-2013-5057 64999 CVE-2013-5057 40517 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005465.html 2013-12-10 2013-12-12 View