CVE-2013-0005: microsoft management_odata_iis_extension Improper Input Validation
Vulnerability summary
CVE-2013-0005 is a high (CVSS 7.8) Improper Input Validation vulnerability in microsoft management_odata_iis_extension. EPSS estimates a 32.10% chance of exploitation in the next 30 days, higher than 98.3% of scored vulnerabilities.
Timeline
- 09-01-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
32.10%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 32.10% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft2 products
- management_odata_iis_extensionna
- .net_framework3.5 | 3.5:sp1 | 3.5.1 | 4.0
1 vendor · 2 products
References
3 links- www.us-cert.gov/cas/techalerts/TA13-008A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16282VDB EntrySignatureX Refsource OVAL
docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-007Vendor AdvisoryX Refsource MS