Memory corruption in Microsoft products - CVE-2013-3906

Vulnerability identifier: #VU4356

CSH Severity: Critical

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2013-3906

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists due to boundary error when handling malicious images. A remote attacker can create specially crafted TIFF image file, trick the victim into opening it, trigger memory corruption and execute arbitrary code with privileges of the current user.

Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system.

Note: the vulnerability was being actively exploited.

Microsoft Windows
Windows Server
Microsoft Excel
Microsoft Office
Microsoft PowerPoint
Microsoft Lync

Install update from vendor's website.

• Exploit #764 - Microsoft - Tagged Image File Format (TIFF) Integer Overflow (Metasploit) (March 18, 2020)
• Exploit #1627 - MS13-096 Microsoft Tagged Image File Format (TIFF) Integer Overflow (March 18, 2020)

• https://technet.microsoft.com/en-us/library/security/ms13-096

• Remote code execution in Microsoft Graphics Component