GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: microsoft
Published: 2013-11-06T11:00:00
Updated: 2024-08-06T16:22:01.367Z
Reserved: 2013-06-03T00:00:00
Link: CVE-2013-3906
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2013-11-06T15:55:05.860
Modified: 2024-12-19T18:31:14.317
Link: CVE-2013-3906
Redhat
No data.