VulnerabilityModified
CVE-2013-0810
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution…
HIGH 8.1EPSS 59.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 59.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability."
- CVSS 3.1
- 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 59.88% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- microsoft/windows server 2003 · microsoft/windows server 2008 · microsoft/windows vista · microsoft/windows xp
- Source
- cve@mitre.org
References
- http://www.us-cert.gov/ncas/alerts/TA13-253AThird Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-071
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18579
- http://www.us-cert.gov/ncas/alerts/TA13-253AThird Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-071
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18579
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.