Vulnerability Details : CVE-2013-3859
Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."
Exploit prediction scoring system (EPSS) score for CVE-2013-3859
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-3859
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
6.9
|
MEDIUM | AV:L/AC:M/Au:N/C:C/I:C/A:C |
3.4
|
10.0
|
NIST |
CWE ids for CVE-2013-3859
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-3859
-
http://www.us-cert.gov/ncas/alerts/TA13-253A
Microsoft Updates for Multiple Vulnerabilities | CISAUS Government Resource
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075
Microsoft Security Bulletin MS13-075 - Important | Microsoft Docs
Products affected by CVE-2013-3859
- cpe:2.3:a:microsoft:office:2010:sp1:x64:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:x86:*:*
- cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:*:x64:*