CVE-2013-3859

Опубликовано: 11 сент. 2013

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."

Ссылки

http://www.us-cert.gov/ncas/alerts/TA13-253A
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075
http://www.us-cert.gov/ncas/alerts/TA13-253A
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2010:sp1:x64:*:*:*:*:*

cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*

cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:*:x64:*

cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:x86:*:*

EPSS

Процентиль: 64%

0.00461

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-8xr3-v8m4-mq8p

github

больше 3 лет назад