CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2013-11-06
Microsoft Windows GDI+ and Office TIFF Image Processing Remote Code Execution Vulnerability (CVE-2013-3906)
[Affected Scope] Windows Vista SP2, Server 2008 SP2, Office 2003/2007/2010, Lync 2010/2013
[Impact] Remote attackers can execute arbitrary code via a specially crafted TIFF image embedded in documents or emails
[Mitigation] Apply the MS13-096 security patch or implement registry workarounds to disable TIFF rendering in GDI+