Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT; GDI+ in Office 2003 SP3, 2007 SP3, and 2010 SP1; GDI+ in Visual Studio .NET 2003 SP1; and GDI+ in Lync 2010, 2010 Attendee, 2013, and Basic 2013 allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."

The version of Microsoft's GDI+ subsystem installed on the remote host has an unspecified code execution vulnerability. Specially crafted TrueType font files are not processed properly. A remote, unauthenticated attacker could exploit this vulnerability by getting a user to view content that contains malicious TrueType font files, resulting in arbitrary code execution.

The Windows kernel on the remote host has the following vulnerabilities :

  - A memory allocation vulnerability exists.
    (CVE-2013-1300)

  - A dereference vulnerability exists. (CVE-2013-1340)

  - A privilege escalation vulnerability exists in the     Windows kernel-mode driver. (CVE-2013-1345)

  - A TrueType Font parsing vulnerability exists.
    (CVE-2013-3129)

  - An information disclosure vulnerability exists.
    (CVE-2013-3167)

  - A buffer overflow vulnerability exists. (CVE-2013-3173)

  - A flaw exists in kernel-mode drivers in how linked lists     pointers are handled in PATHREC objects. (CVE-2013-3660)

A remote attacker could exploit any of these vulnerabilities to elevate privileges.

The version of the .NET Framework installed on the remote host is reportedly affected by the following vulnerabilities :

  - A vulnerability exists in the way that affected     components handle specially crafted TrueType font     files that could lead to remote code execution.  An     attacker could leverage this issue by enticing a user     to open a specially crafted TrueType font file.
    (CVE-2013-3129)

  - The .NET Framework does not properly handle     multidimensional arrays of small structures, which     could lead to remote code execution. (CVE-2013-3131)

  - The .NET Framework does not properly validate the     permissions of certain objects performing reflection.
    This could allow an attacker to elevate their privileges     and take complete control of the system.
    (CVE-2013-3132)

  - The .NET Framework does not properly validate the     permissions of objects involved with reflection, which     could lead to an elevation of privileges.
    (CVE-2013-3133)

  - The .NET Framework is affected by a remote code     execution vulnerability due to the way in which it     allocates arrays of small structures. (CVE-2013-3134)

  - The .NET Framework does not properly validate the     permissions for delegate objects during serialization,     which could lead to an elevation of privileges.
    (CVE-2013-3171)

  - Microsoft Silverlight does not properly handle null     pointers, which could lead to remote code execution.
    (CVE-2013-3178)

An attacker may be able to leverage these vulnerabilities to execute arbitrary code on the affected system if a user can be tricked into viewing a specially crafted web page using a web browser that can run XAML Browser Applications (XBAPs) or Silverlight applications.

ID	Name	Product	Family	Severity
67211	MS13-054: Vulnerability in GDI+ Could Allow Remote Code Execution (2848295)	Nessus	Windows : Microsoft Bulletins	high
67210	MS13-053: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Remote Code Execution (2850851)	Nessus	Windows : Microsoft Bulletins	high
67209	MS13-052: Vulnerabilities in .NET Framework and Silverlight Could Allow Remote Code Execution (2861561)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2013-3129

high

Tenable Plugins

high

high

high