CVE-2013-0810

Description

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka Windows Theme File Remote Code Execution Vulnerability.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
82.217

Associated Vulnerability

VulnerabilityOS Platform
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows XP (KB2864063)Windows
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows Server 2003 (KB2864063)Windows
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows Vista (KB2864063)Windows
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows Server 2008 (KB2864063)Windows
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows XP x64 Edition (KB2864063)Windows
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows Server 2003 x64 Edition (KB2864063)Windows
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows Vista for x64-based Systems (KB2864063)Windows
ms13-071: vulnerability in windows theme file could allow remote code execution: september 10, 2013 for Windows Server 2008 x64 Edition (KB2864063)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-14408Security Update for Windows Server 2003 (KB2864063)
PATCH-14409Security Update for Windows Vista (KB2864063)
PATCH-14410Security Update for Windows Server 2008 (KB2864063)
PATCH-14411Security Update for Windows XP x64 Edition (KB2864063)
PATCH-14412Security Update for Windows Server 2003 x64 Edition (KB2864063)
PATCH-14413Security Update for Windows Vista for x64-based Systems (KB2864063)
PATCH-14414Security Update for Windows Server 2008 x64 Edition (KB2864063)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234