CVE-2013-4858

Exploit

EPSS 20.36%
Published 30.12.2013 04:53:07
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

Microsoft Windows Movie Maker 2.1.4026.0 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) via a crafted .wav file, as demonstrated by movieMaker.wav.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Windows Movie Maker Version2.1.4026.0

Microsoft ≫ Windows Xp Updatesp3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	20.36%	0.954

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://downloads.securityfocus.com/vulnerabilities/exploits/61334.py

Exploit

http://www.securityfocus.com/bid/61334

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2013-4858

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4858

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4858

EUVD