CVE-2013-0810: microsoft windows_xp Code Injection

CVSS: 9.3v2.0HighModified

Published 11-09-2013Last modified 21-10-2024

Vulnerability summary

CVE-2013-0810 is a high (CVSS 9.3) Code Injection vulnerability in microsoft windows_xp. EPSS estimates a 59.88% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

59.88%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2exploit-database, metasploit

Timeline

11-09-2013
PublishedVulnerability first disclosed.
21-10-2024
Last modifiedVulnerability information updated.

Description

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability."

CVSS metrics

3 scores · 2 sources · 2 versions

v3.18.1v2.09.3

EPSS trend

Probability

59.88%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 59.88% on 20-09-2026

20-09-202620-10-2026

EPSS score

59.88%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

exploit-databaseremotewindowsVerified
Microsoft Windows Theme File Handling - Arbitrary Code Execution (MS13-071) (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution
exploit/windows/fileformat/ms13_071_theme
Maturity: weaponized