Detections
Analytics
MS13-002: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (2756145)
high Nessus Plugin ID 63420
Language:
Synopsis
Arbitrary code can be executed on the remote host through Microsoft XML Core Services.Description
The version of Microsoft XML Core Services installed on the remote Windows host is affected by multiple code execution vulnerabilities when visiting a specially crafted web page using Internet Explorer.Solution
Microsoft has released a set of patches for Windows XP, 2003, Vista, 2008, 7, and 2008 R2, 8, 2012, Office 2003, 2007, Word Viewer, Office Compatibility Pack, Expression Web Service, Expression Web 2, SharePoint Server 2007 and Groove Server 2007.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2013/ms13-002
Plugin Details
Severity: High
ID: 63420
File Name: smb_nt_ms13-002.nasl
Version: 1.11
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 1/9/2013
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:microsoft:expression_web, cpe:/a:microsoft:sharepoint_server, cpe:/a:microsoft:groove_server, cpe:/a:microsoft:office_compatibility_pack, cpe:/a:microsoft:word_viewer, cpe:/a:microsoft:office, cpe:/a:microsoft:xml_core_services, cpe:/o:microsoft:windows
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 1/8/2013
Vulnerability Publication Date: 1/8/2013
Reference Information
CVE: CVE-2013-0006, CVE-2013-0007