PT-2013-4693 · Microsoft · Office 2010 Sp1+2

Wei Wang · Publicado 2013-09-11 · Atualizado 2018-10-12 · CVE-2013-3859

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Pinyin IME 2010 Microsoft Office 2010 SP1

Description The issue arises when Microsoft Pinyin IME 2010 is used with Microsoft Office 2010 SP1, as it fails to properly restrict configuration options. This allows local users to gain privileges by starting Internet Explorer from the IME toolbar.

Recommendations For Microsoft Pinyin IME 2010, avoid starting Internet Explorer from the IME toolbar until a fix is available. For Microsoft Office 2010 SP1, restrict the use of the IME toolbar in conjunction with Internet Explorer to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-3859

Produtos afetados

Internet Explorer

Office 2010 Sp1

Pinyin Ime 2010

Referências · 3

• http://us-cert.gov/ncas/alerts/TA13-253A · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3859 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075 · Aviso do Fabricante