9.3 - MS13-010

Executive Summary

Summary
Title	Vulnerability in Vector Markup Language Could Allow Remote Code Execution (2797052)

Informations
Name	MS13-010	First vendor Publication	2013-02-12
Vendor	Microsoft	Last vendor Modification	2013-02-12
Severity (Vendor)	Critical	Revision	1.1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Revision Note: V1.1 (February 12, 2013): Added a link to Microsoft Knowledge Base Article 2797052 under Known Issues in the Executive Summary. In addition, corrected the FAQ entry for Internet Explorer 10 Release Preview for Windows 7 and Windows Server 2008 R2.

Summary: This security update resolves a privately reported vulnerability in the Microsoft implementation of Vector Markup Language (VML). The vulnerability could allow remote code execution if a user viewed a specially crafted webpage using Internet Explorer. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Original Source

Url : http://technet.microsoft.com/en-us/security/bulletin/ms13-010

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16175

Oval ID:	oval:org.mitre.oval:def:16175
Title:	VML memory corruption vulnerability in Internet Explorer - MS13-010
Description:	The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via a crafted web site, aka "VML Memory Corruption Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-0030	Version:	8
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Vista Microsoft Windows XP Microsoft Windows 8	Product(s):	Microsoft Internet Explorer 10 Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Microsoft Internet Explorer 9
Definition Synopsis:
Check for vulnerable IE6 and file version Microsoft Internet Explorer 6 is installed AND Check for vulnerable OS Check for vulnerable OS and file version Microsoft Windows XP (32-bit) is installed AND Check if version of vgx.dll is less than 6.0.2900.6333 OR Check for vulnerable OS and file version Check for vulnerable OS Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Microsoft Windows XP x64 is installed AND Check if version of vgx.dll is less than 6.0.3790.5105 OR Check for vulnerable IE7 and file version Microsoft Internet Explorer 7 is installed AND Check for vulnerable IE7 Check for vulnerable OS and file version Check for vulnerable OS Microsoft Windows XP (32-bit) is installed AND Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND Check if version of vgx.dll is less than 7.0.6000.21324 OR Check for vulnerable OS and file version Check for vulnerable OS Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Check for LDR/GDR Check if version of vgx.dll is less than 7.0.6002.18762 OR Check for LDR Check if version of vgx.dll is less than 7.0.6002.23011 AND Vgx.dll version is greater than or equal to 7.0.6002.22000 OR Check for vulnerable IE8 and file version Microsoft Internet Explorer 8 is installed AND Check for vulnerable IE8 Check for vulnerable OS Microsoft Windows XP (32-bit) is installed AND Check for LDR/GDR Check if version of vgx.dll is less than 8.0.6001.19400 OR Check for LDR Check if version of vgx.dll is less than 8.0.6001.23468 AND Vgx.dll version is greater than or equal to 8.0.6001.22000 OR Check for vulnerable OS and file version Check for vulnerable OS Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Check if version of vgx.dll is less than 8.0.6001.23468 OR Check for vulnerable OS and file version Check for vulnerable OS Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Check for LDR/GDR Check if version of vgx.dll is less than 8.0.6001.19399 OR Check for LDR Check if version of vgx.dll is less than 8.0.6001.23467 AND Vgx.dll version is greater than or equal to 8.0.6001.22000 OR Check for vulnerable OS and file version Check for vulnerable OS Microsoft Windows 7 is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Check for LDR/GDR Check if version of vgx.dll is less than 8.0.7600.17201 OR Check for LDR Check if version of vgx.dll is less than 8.0.7600.21411 AND Vgx.dll version is greater than or equal to 8.0.7600.20000 OR Check for vulnerable OS and file version Check for vulnerable OS Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Check for LDR/GDR Check if version of vgx.dll is less than 8.0.7601.18038 OR Check for LDR Check if version of vgx.dll is less than 8.0.7601.22204 AND Vgx.dll version is greater than or equal to 8.0.7601.20000 OR Check for vulnerable IE9 and file version Check for vulnerable OS Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows 7 is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Check for LDR/GDR Check if version of vgx.dll is less than 9.0.8112.16464 OR Check for LDR Check if version of vgx.dll is less than 9.0.8112.20573 AND Check if version of vgx.dll is greater than or equal to 9.0.8112.20000 AND Microsoft Internet Explorer 9 is installed OR Check for vulnerable IE10 and file version Check for vulnerable OS Microsoft Windows 8 is installed AND Microsoft Windows Server 2012 is installed AND Check for LDR/GDR Check if version of vgx.dll is less than 10.0.9200.16490 OR Check for LDR Check if version of vgx.dll is less than 10.0.9200.20595 AND Check if version of vgx.dll is greater than or equal to 10.0.9200.20000 AND Microsoft Internet Explorer 10 is installed

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Internet Explorer cpe:2.3:a:microsoft:internet_explorer:10:::::::* cpe:2.3:a:microsoft:internet_explorer:9:::::::* cpe:2.3:a:microsoft:internet_explorer:8:::::::* cpe:2.3:a:microsoft:internet_explorer:7:::::::* cpe:2.3:a:microsoft:internet_explorer:6:::::::*	5

Snort® IPS/IDS

Date	Description
2014-01-10	Microsoft Internet Explorer VML shape object malformed path attempt RuleID : 25773 - Revision : 6 - Type : BROWSER-IE

Nessus® Vulnerability Scanner

Date	Description
2013-02-12	Name : Arbitrary code can be executed on the remote host through a web browser. File : smb_nt_ms13-010.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:47:33	Multiple Updates
2013-05-11 00:50:06	Multiple Updates
2013-02-13 21:22:16	Multiple Updates
2013-02-13 05:21:12	Multiple Updates
2013-02-13 05:17:45	Multiple Updates
2013-02-12 21:22:09	Multiple Updates
2013-02-12 21:18:33	First insertion

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	5
Snort® Rule(s)	1
Nessus® Exploit(s)	1

	Related
10	MS13-105
10	MS13-062
9.3	MS13-099
9.3	MS13-097
9.3	MS13-096
9.3	MS13-091
9.3	MS13-090
9.3	MS13-089
9.3	MS13-088
9.3	MS13-082
9.3	MS13-081
9.3	MS13-054
9.3	MS13-028
9.3	MS13-021
9.3	MS13-004
9.3	MS13-002
9.3	MS11-052
9.3	CVE-2013-0030
9	MS13-050
7.9	MS13-092
7.8	MS13-039
7.6	MS13-098
7.2	MS13-101
7.2	MS13-046
6.9	MS13-102
6.9	MS13-075
6.8	MS13-100
5.8	MS13-006
5	MS13-095
5	MS13-094
4.9	MS13-093
4.3	MS13-106
4.3	MS13-104
4.3	MS13-103
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 34 more Alert(s)

9.3 - MS13-010

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU