CVE-2013-3870
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 19%
probabilidade de exploração
19%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including many nested S/MIME certificates in an e-mail message, aka "Message Certificate Vulnerability."
Produtos afetados
n/a · n/aReferências
http://blogs.technet.com/b/srd/archive/2013/09/10/assessing-risk-for-the-september-2013-security-updates.aspxhttp://blogs.technet.com/b/srd/archive/2013/09/10/ms13-068-a-difficult-to-exploit-double-free-in-outlook.aspxhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-068https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18857http://www.us-cert.gov/ncas/alerts/TA13-253A