CVE-2013-2558 : Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to caus

Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service (reboot) or possibly have unknown other impact via a crafted TrueType Font (TTF) file, as demonstrated by the 120612-69701-01.dmp error report.

Published 2013-03-13 00:55:01

Updated 2013-03-16 16:18:34

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2013-2558

Microsoft » Windows 8 » Version: N/A X64 Edition
cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*
Matching versions
Microsoft » Windows 8 » Version: N/A X86 Edition
cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2013-2558

EPSS FAQ

0.81%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 82 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-2558

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2013-2558

http://immunityproducts.blogspot.com/2013/03/infiltrate-preview-truetype-font.html

Immunity Products: Infiltrate Preview - TrueType Font Fuzzing and Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2013-2558

Products affected by CVE-2013-2558

Exploit prediction scoring system (EPSS) score for CVE-2013-2558

CVSS scores for CVE-2013-2558

References for CVE-2013-2558