CVE-2013-3859
Summary
| CVE | CVE-2013-3859 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-09-11 14:03:00 UTC |
| Updated | 2018-10-12 22:05:00 UTC |
| Description | Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability." |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | Office | 2010 | sp1 | All | All |
| Application | Microsoft | Office | 2010 | sp1 | x64 | All |
| Application | Microsoft | Office | 2010 | sp1 | x86 | All |
| Application | Microsoft | Office | 2010 | sp1 | All | All |
| Application | Microsoft | Office | 2010 | sp1 | x64 | All |
| Application | Microsoft | Office | 2010 | sp1 | x86 | All |
| Application | Microsoft | Pinyin Ime | 2010 | All | All | All |
| Application | Microsoft | Pinyin Ime | 2010 | All | All | All |
| Application | Microsoft | Pinyin Ime | 2010 | All | All | All |
| Application | Microsoft | Pinyin Ime | 2010 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Microsoft Updates for Multiple Vulnerabilities | US-CERT | CERT | www.us-cert.gov | US Government Resource |
| Microsoft Security Bulletin MS13-075 - Important | Microsoft Docs | MS | docs.microsoft.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.