PT-2013-3101 · Microsoft · Malware Protection Engine

Graeme Gill · Publicado 2013-05-15 · Atualizado 2013-05-15 · CVE-2013-1346

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Malware Protection Engine version 1.1.9506.0 and earlier on x64 platforms

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted file. This is related to the mpengine.dll component.

Recommendations For versions prior to 1.1.9506.0, update to version 1.1.9506.0 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-1346

Produtos afetados

Malware Protection Engine

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2013-1346 · Nota de Segurança
• http://technet.microsoft.com/security/advisory/2846338 · Aviso do Fabricante