The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted web page that is accessed by Internet Explorer, as exploited in the wild in November 2013, aka "InformationCardSigninHelper Vulnerability."
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2013-11-12T01:00:00

Updated: 2024-08-06T16:22:01.629Z

Reserved: 2013-06-03T00:00:00

Link: CVE-2013-3918

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-11-12T14:35:11.713

Modified: 2024-11-21T01:54:32.180

Link: CVE-2013-3918

cve-icon Redhat

No data.