CVE-2013-3128: microsoft .net_framework
Vulnerability summary
CVE-2013-3128 is a high (CVSS 9.3) vulnerability in microsoft .net_framework. EPSS estimates a 50.37% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities.
Timeline
- 09-10-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
50.37%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 50.37% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft9 products
- .net_framework3.0:sp2 | 3.5 | 3.5.1 | 4.0 | 4.5
- windows_7na
- windows_8na
- windows_rtna
- windows_server_2003na
1 vendor · 9 products
References
4 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18847VDB EntrySignatureX Refsource OVALThird Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-082Vendor AdvisoryX Refsource MSPatch- docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081Vendor AdvisoryX Refsource MSPatch