CVE-2013-1346

CWE-119 — Buffer Overflow3 documents3 sources
Severity
9.3CRITICAL
EPSS
18.3%
top 4.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Malware Protection Engine
Timeline
PublishedMay 15
Latest updateMay 17

Description

mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: technet.microsoft.com ↗Patch: technet.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f926-4hf6-xv83: mpengine↗2022-05-17
▶
CVEList
CVE-2013-1346: mpengine↗2013-05-15
▶
CVE-2013-1346 (CRITICAL CVSS 9.3) | mpengine.dll in Microsoft Malware P | cvebase.io