Exploit / PoCcriticalExploited in the wild

Microsoft Update Tuesday: December 2013, some 0

Cisco TalosDec 10, 2013 · 18:36 UTC (Dec 10, 2013)3 min read2 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2013-5045 CVE-2013-5046 CVE-2013-3906 CVE-2013-3900 CVE-2013-5056 CVE-2013-5763 CVE-2013-5791 CVE-2013-1330 CVE-2013-5072 CVE-2013-5059 CVE-2013-5065 CVE-2013-3346 CVE-2013-3878 CVE-2013-5054 CVE-2013-5057

Tags: cve-2013-5045 cve-2013-5046 cve-2013-3906 cve-2013-3900 cve-2013-5056 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2013-3346	Memory Corruption RCE in Adobe Reader and Acrobat	—	79%	KEV	— KEV Mar 3, 2022
CVE-2013-3900	Authenticode Signature Verification Flaw in Microsoft WinVerifyTrust (RCE)	5.5	45%	KEV	Dec 11, 2013 KEV Jan 10, 2022
CVE-2013-3906	Memory Corruption RCE in Microsoft Graphics Component (Actively Exploited)	—	85%	KEV	— KEV Feb 15, 2022
CVE-2013-5065	Local Privilege Escalation in Microsoft Windows Kernel (NDProxy.sys)	—	35%	KEV	— KEV Mar 3, 2022

From the original article

3 min read at blog.talosintelligence.com

Microsoft’s final update for the year brings us 11 bulletins covering 24 CVE issues. As is customary, there is the critical IE bulletin, MS13-097 . This time it covers 7 CVE issues.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.