Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.902942
Category:Windows : Microsoft Bulletins
Title:Microsoft OLE Automation Remote Code Execution Vulnerability (2802968)
Summary:This host is missing a critical security update according to; Microsoft Bulletin MS13-020.
Description:Summary:
This host is missing a critical security update according to
Microsoft Bulletin MS13-020.

Vulnerability Insight:
The flaw is due to memory allocation error in Microsoft Windows Object
Linking and Embedding (OLE) Automation, This can be exploited to execute
arbitrary code on the target system.

Vulnerability Impact:
Successful exploitation will allow remote attackers to execute arbitrary
code.

Affected Software/OS:
Microsoft Windows XP x32 Service Pack 3 and prior.

Solution:
The vendor has released updates. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2013-1313
Cert/CC Advisory: TA13-043B
http://www.us-cert.gov/cas/techalerts/TA13-043B.html
Microsoft Security Bulletin: MS13-020
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-020
Microsoft Security Bulletin: MS13-037
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-037
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16385
CopyrightCopyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.