Vulnerability Details : CVE-2013-3859
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."
Products affected by CVE-2013-3859
- cpe:2.3:a:microsoft:office:2010:sp1:x64:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:x86:*:*
- cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:*:x64:*
Exploit prediction scoring system (EPSS) score for CVE-2013-3859
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2013-3859
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.9
|
MEDIUM | AV:L/AC:M/Au:N/C:C/I:C/A:C |
3.4
|
10.0
|
NIST |
CWE ids for CVE-2013-3859
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-3859
-
http://www.us-cert.gov/ncas/alerts/TA13-253A
Microsoft Updates for Multiple Vulnerabilities | CISAUS Government Resource
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075
Microsoft Security Bulletin MS13-075 - Important | Microsoft Docs
Jump to