Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0002.

Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0002?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'MS13-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004'}, {'name': 'oval:org.mitre.oval:def:16343', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16343'}, {'name': '[santuario-commits] 20190823 svn commit: r1049214 - in /websites/production/santuario/content: cache/main.pageCache download.html index.html javaindex.html javareleasenotes.html secadv.data/CVE-2019-12400.asc secadv.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3%40%3Ccommits.santuario.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0002?


Explain the CVE ID: What does the identifier CVE-2013-0003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0003.

Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0003?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:16381', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16381'}, {'name': 'MS13-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0003?


Explain the CVE ID: What does the identifier CVE-2013-0004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0004.

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate the permissions of objects in memory, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Double Construction Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0004?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:16339', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16339'}, {'name': 'MS13-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0004?


Explain the CVE ID: What does the identifier CVE-2013-0005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0005.

The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0005?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:16282', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16282'}, {'name': 'MS13-007', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-007'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0005?


Explain the CVE ID: What does the identifier CVE-2013-0006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0006.

Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0006?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'MS13-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002'}, {'name': 'oval:org.mitre.oval:def:16429', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16429'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-20-315-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0006?


Explain the CVE ID: What does the identifier CVE-2013-0007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0007.

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0007?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:15458', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15458'}, {'name': 'MS13-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-002'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0007?


Explain the CVE ID: What does the identifier CVE-2013-0008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0008.

win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka "Win32k Improper Message Handling Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0008?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:16326', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16326'}, {'name': '24485', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24485'}, {'name': 'MS13-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-005'}, {'name': '57135', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/57135'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0008?


Explain the CVE ID: What does the identifier CVE-2013-0009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0009.

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0010.


Provide references for further information: Can you share references or external links related to CVE-2013-0009?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:15760', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15760'}, {'name': 'MS13-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0009?


Explain the CVE ID: What does the identifier CVE-2013-0010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0010.

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Center Operations Manager Web Console XSS Vulnerability," a different vulnerability than CVE-2013-0009.


Provide references for further information: Can you share references or external links related to CVE-2013-0010?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:16232', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16232'}, {'name': 'MS13-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-003'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0010?


Explain the CVE ID: What does the identifier CVE-2013-0011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0011.

The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted print job, aka "Windows Print Spooler Components Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0011?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'MS13-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-001'}, {'name': 'oval:org.mitre.oval:def:16357', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16357'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0011?


Explain the CVE ID: What does the identifier CVE-2013-0012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0012.


Provide references for further information: Can you share references or external links related to CVE-2013-0012?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0012?


Explain the CVE ID: What does the identifier CVE-2013-0013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0013.

The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle encrypted packets, which allows man-in-the-middle attackers to conduct SSLv2 downgrade attacks against (1) SSLv3 sessions or (2) TLS sessions by intercepting handshakes and injecting content, aka "Microsoft SSL Version 3 and TLS Protocol Security Feature Bypass Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0013?

{'name': 'TA13-008A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-008A.html'}, {'name': 'oval:org.mitre.oval:def:16273', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16273'}, {'name': 'MS13-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-006'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0013?


Explain the CVE ID: What does the identifier CVE-2013-0014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0014.


Provide references for further information: Can you share references or external links related to CVE-2013-0014?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0014?


Explain the CVE ID: What does the identifier CVE-2013-0015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0015.

Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0015?

{'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'oval:org.mitre.oval:def:16371', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16371'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0015?


Explain the CVE ID: What does the identifier CVE-2013-0016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0016.


Provide references for further information: Can you share references or external links related to CVE-2013-0016?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0016?


Explain the CVE ID: What does the identifier CVE-2013-0017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0017.


Provide references for further information: Can you share references or external links related to CVE-2013-0017?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0017?


Explain the CVE ID: What does the identifier CVE-2013-0018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0018.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SetCapture Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0018?

{'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': 'oval:org.mitre.oval:def:16438', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16438'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0018?


Explain the CVE ID: What does the identifier CVE-2013-0019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0019.

Use-after-free vulnerability in Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer COmWindowProxy Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0019?

{'tags': ['x_refsource_MISC'], 'url': 'http://blog.skylined.nl/20161202001.html'}, {'name': 'oval:org.mitre.oval:def:16465', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16465'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': '40879', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40879/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0019?


Explain the CVE ID: What does the identifier CVE-2013-0020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0020.

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CMarkup Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0020?

{'name': 'oval:org.mitre.oval:def:15875', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15875'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0020?


Explain the CVE ID: What does the identifier CVE-2013-0021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0021.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer vtable Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0021?

{'name': 'oval:org.mitre.oval:def:16483', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16483'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': '[santuario-commits] 20210917 svn commit: r1076843 - in /websites/production/santuario/content: cache/main.pageCache index.html javaindex.html secadv.data/CVE-2021-40690.txt.asc secadv.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd%40%3Ccommits.santuario.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0021?


Explain the CVE ID: What does the identifier CVE-2013-0022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0022.

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer LsGetTrailInfo Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0022?

{'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': 'oval:org.mitre.oval:def:16069', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16069'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0022?


Explain the CVE ID: What does the identifier CVE-2013-0023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0023.

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CDispNode Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0023?

{'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': 'oval:org.mitre.oval:def:16470', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16470'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0023?


Explain the CVE ID: What does the identifier CVE-2013-0024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0024.

Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer pasteHTML Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0024?

{'name': 'oval:org.mitre.oval:def:16126', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16126'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0024?


Explain the CVE ID: What does the identifier CVE-2013-0025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0025.

Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0025?

{'name': 'oval:org.mitre.oval:def:16294', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16294'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0025?


Explain the CVE ID: What does the identifier CVE-2013-0026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0026.

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer InsertElement Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0026?

{'name': 'oval:org.mitre.oval:def:16472', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16472'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0026?


Explain the CVE ID: What does the identifier CVE-2013-0027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0027.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CPasteCommand Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0027?

{'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'oval:org.mitre.oval:def:16360', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16360'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0027?


Explain the CVE ID: What does the identifier CVE-2013-0028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0028.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CObjectElement Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0028?

{'name': 'oval:org.mitre.oval:def:16249', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16249'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0028?


Explain the CVE ID: What does the identifier CVE-2013-0029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0029.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CHTML Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0029?

{'name': 'oval:org.mitre.oval:def:16245', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16245'}, {'name': 'MS13-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0029?


Explain the CVE ID: What does the identifier CVE-2013-0030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0030.

The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via a crafted web site, aka "VML Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0030?

{'name': 'oval:org.mitre.oval:def:16175', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16175'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': 'MS13-010', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-010'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0030?


Explain the CVE ID: What does the identifier CVE-2013-0031 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0031.


Provide references for further information: Can you share references or external links related to CVE-2013-0031?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0031?


Explain the CVE ID: What does the identifier CVE-2013-0032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0032.


Provide references for further information: Can you share references or external links related to CVE-2013-0032?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0032?


Explain the CVE ID: What does the identifier CVE-2013-0033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0033.


Provide references for further information: Can you share references or external links related to CVE-2013-0033?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0033?


Explain the CVE ID: What does the identifier CVE-2013-0034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0034.


Provide references for further information: Can you share references or external links related to CVE-2013-0034?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0034?


Explain the CVE ID: What does the identifier CVE-2013-0035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0035.


Provide references for further information: Can you share references or external links related to CVE-2013-0035?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0035?


Explain the CVE ID: What does the identifier CVE-2013-0036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0036.


Provide references for further information: Can you share references or external links related to CVE-2013-0036?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0036?


Explain the CVE ID: What does the identifier CVE-2013-0037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0037.


Provide references for further information: Can you share references or external links related to CVE-2013-0037?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0037?


Explain the CVE ID: What does the identifier CVE-2013-0038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0038.


Provide references for further information: Can you share references or external links related to CVE-2013-0038?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0038?


Explain the CVE ID: What does the identifier CVE-2013-0039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0039.


Provide references for further information: Can you share references or external links related to CVE-2013-0039?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0039?


Explain the CVE ID: What does the identifier CVE-2013-0040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0040.


Provide references for further information: Can you share references or external links related to CVE-2013-0040?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0040?


Explain the CVE ID: What does the identifier CVE-2013-0041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0041.


Provide references for further information: Can you share references or external links related to CVE-2013-0041?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0041?


Explain the CVE ID: What does the identifier CVE-2013-0042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0042.


Provide references for further information: Can you share references or external links related to CVE-2013-0042?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0042?


Explain the CVE ID: What does the identifier CVE-2013-0043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0043.


Provide references for further information: Can you share references or external links related to CVE-2013-0043?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0043?


Explain the CVE ID: What does the identifier CVE-2013-0044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0044.


Provide references for further information: Can you share references or external links related to CVE-2013-0044?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0044?


Explain the CVE ID: What does the identifier CVE-2013-0045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0045.


Provide references for further information: Can you share references or external links related to CVE-2013-0045?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0045?


Explain the CVE ID: What does the identifier CVE-2013-0046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0046.


Provide references for further information: Can you share references or external links related to CVE-2013-0046?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0046?


Explain the CVE ID: What does the identifier CVE-2013-0047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0047.


Provide references for further information: Can you share references or external links related to CVE-2013-0047?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0047?


Explain the CVE ID: What does the identifier CVE-2013-0048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0048.


Provide references for further information: Can you share references or external links related to CVE-2013-0048?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0048?


Explain the CVE ID: What does the identifier CVE-2013-0049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0049.


Provide references for further information: Can you share references or external links related to CVE-2013-0049?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0049?


Explain the CVE ID: What does the identifier CVE-2013-0050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0050.


Provide references for further information: Can you share references or external links related to CVE-2013-0050?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0050?


Explain the CVE ID: What does the identifier CVE-2013-0051 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0051.


Provide references for further information: Can you share references or external links related to CVE-2013-0051?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0051?


Explain the CVE ID: What does the identifier CVE-2013-0052 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0052.


Provide references for further information: Can you share references or external links related to CVE-2013-0052?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0052?


Explain the CVE ID: What does the identifier CVE-2013-0053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0053.


Provide references for further information: Can you share references or external links related to CVE-2013-0053?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0053?


Explain the CVE ID: What does the identifier CVE-2013-0054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0054.


Provide references for further information: Can you share references or external links related to CVE-2013-0054?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0054?


Explain the CVE ID: What does the identifier CVE-2013-0055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0055.


Provide references for further information: Can you share references or external links related to CVE-2013-0055?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0055?


Explain the CVE ID: What does the identifier CVE-2013-0056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0056.


Provide references for further information: Can you share references or external links related to CVE-2013-0056?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0056?


Explain the CVE ID: What does the identifier CVE-2013-0057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0057.


Provide references for further information: Can you share references or external links related to CVE-2013-0057?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0057?


Explain the CVE ID: What does the identifier CVE-2013-0058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0058.


Provide references for further information: Can you share references or external links related to CVE-2013-0058?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0058?


Explain the CVE ID: What does the identifier CVE-2013-0059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0059.


Provide references for further information: Can you share references or external links related to CVE-2013-0059?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0059?


Explain the CVE ID: What does the identifier CVE-2013-0060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0060.


Provide references for further information: Can you share references or external links related to CVE-2013-0060?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0060?


Explain the CVE ID: What does the identifier CVE-2013-0061 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0061.


Provide references for further information: Can you share references or external links related to CVE-2013-0061?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0061?


Explain the CVE ID: What does the identifier CVE-2013-0062 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0062.


Provide references for further information: Can you share references or external links related to CVE-2013-0062?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0062?


Explain the CVE ID: What does the identifier CVE-2013-0063 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0063.


Provide references for further information: Can you share references or external links related to CVE-2013-0063?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0063?


Explain the CVE ID: What does the identifier CVE-2013-0064 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0064.


Provide references for further information: Can you share references or external links related to CVE-2013-0064?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0064?


Explain the CVE ID: What does the identifier CVE-2013-0065 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0065.


Provide references for further information: Can you share references or external links related to CVE-2013-0065?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0065?


Explain the CVE ID: What does the identifier CVE-2013-0066 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0066.


Provide references for further information: Can you share references or external links related to CVE-2013-0066?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0066?


Explain the CVE ID: What does the identifier CVE-2013-0067 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0067.


Provide references for further information: Can you share references or external links related to CVE-2013-0067?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0067?


Explain the CVE ID: What does the identifier CVE-2013-0068 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0068.


Provide references for further information: Can you share references or external links related to CVE-2013-0068?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0068?


Explain the CVE ID: What does the identifier CVE-2013-0069 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0069.


Provide references for further information: Can you share references or external links related to CVE-2013-0069?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0069?


Explain the CVE ID: What does the identifier CVE-2013-0070 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0070.


Provide references for further information: Can you share references or external links related to CVE-2013-0070?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0070?


Explain the CVE ID: What does the identifier CVE-2013-0071 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0071.


Provide references for further information: Can you share references or external links related to CVE-2013-0071?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0071?


Explain the CVE ID: What does the identifier CVE-2013-0072 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0072.


Provide references for further information: Can you share references or external links related to CVE-2013-0072?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0072?


Explain the CVE ID: What does the identifier CVE-2013-0073 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0073.

The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0073?

{'name': 'oval:org.mitre.oval:def:16475', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16475'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': 'MS13-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-015'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0073?


Explain the CVE ID: What does the identifier CVE-2013-0074 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0074.

Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0074?

{'name': 'oval:org.mitre.oval:def:16565', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16565'}, {'name': 'oval:org.mitre.oval:def:16516', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16516'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-022', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-022'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0074?


Explain the CVE ID: What does the identifier CVE-2013-0075 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0075.

The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0075?

{'name': 'MS13-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-018'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': 'oval:org.mitre.oval:def:16373', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0075?


Explain the CVE ID: What does the identifier CVE-2013-0076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0076.

The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0076?

{'name': 'MS13-019', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-019'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}, {'name': 'oval:org.mitre.oval:def:16478', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0076?


Explain the CVE ID: What does the identifier CVE-2013-0077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0077.

Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0077?

{'name': 'oval:org.mitre.oval:def:15873', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15873'}, {'name': 'MS13-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-011'}, {'name': 'TA13-043B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA13-043B.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0077?


Explain the CVE ID: What does the identifier CVE-2013-0078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0078.

The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0078?

{'name': 'MS13-034', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-034'}, {'name': 'TA13-100A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-100A'}, {'name': 'oval:org.mitre.oval:def:16293', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16293'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0078?


Explain the CVE ID: What does the identifier CVE-2013-0079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0079.

Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0079?

{'name': 'VU#851777', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/851777'}, {'name': 'MS13-023', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-023'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'oval:org.mitre.oval:def:16300', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16300'}, {'name': '20130312 Microsoft Office Visio Viewer ActiveX Type Confusion Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1024'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0079?


Explain the CVE ID: What does the identifier CVE-2013-0080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0080.

Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "Callback Function Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0080?

{'name': 'MS13-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'oval:org.mitre.oval:def:16596', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16596'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0080?


Explain the CVE ID: What does the identifier CVE-2013-0081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0081.

Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0081?

{'name': 'MS13-067', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067'}, {'name': 'oval:org.mitre.oval:def:19036', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19036'}, {'name': 'TA13-253A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-253A'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0081?


Explain the CVE ID: What does the identifier CVE-2013-0082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0082.

Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "WPD File Format Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0082?

{'name': 'TA13-317A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-317A'}, {'name': 'oval:org.mitre.oval:def:19178', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19178'}, {'name': 'MS13-091', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-091'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0082?


Explain the CVE ID: What does the identifier CVE-2013-0083 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0083.

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0083?

{'name': 'MS13-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0083?


Explain the CVE ID: What does the identifier CVE-2013-0084 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0084.

Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypass intended read restrictions for content, and hijack user accounts, via a crafted URL, aka "SharePoint Directory Traversal Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0084?

{'name': 'MS13-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'oval:org.mitre.oval:def:16445', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16445'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0084?


Explain the CVE ID: What does the identifier CVE-2013-0085 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0085.

Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of service (W3WP process crash and site outage) via a crafted URL, aka "Buffer Overflow Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0085?

{'name': 'MS13-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-024'}, {'name': 'oval:org.mitre.oval:def:16414', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16414'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0085?


Explain the CVE ID: What does the identifier CVE-2013-0086 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0086.

Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0086?

{'name': 'MS13-025', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-025'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'oval:org.mitre.oval:def:16539', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16539'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0086?


Explain the CVE ID: What does the identifier CVE-2013-0087 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0087.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer OnResize Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0087?

{'name': 'oval:org.mitre.oval:def:16583', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16583'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0087?


Explain the CVE ID: What does the identifier CVE-2013-0088 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0088.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer saveHistory Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0088?

{'name': 'oval:org.mitre.oval:def:16386', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16386'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0088?


Explain the CVE ID: What does the identifier CVE-2013-0089 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0089.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CMarkupBehaviorContext Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0089?

{'name': 'oval:org.mitre.oval:def:16587', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16587'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0089?


Explain the CVE ID: What does the identifier CVE-2013-0090 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0090.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CCaret Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0090?

{'name': '40935', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40935/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/140186/Microsoft-Internet-Explorer-9-IEFRAME-CView-EnsureSize-Use-After-Free.html'}, {'name': 'oval:org.mitre.oval:def:16049', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16049'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}, {'tags': ['x_refsource_MISC'], 'url': 'http://blog.skylined.nl/20161216001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0090?


Explain the CVE ID: What does the identifier CVE-2013-0091 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0091.

Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CElement Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0091?

{'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}, {'name': 'oval:org.mitre.oval:def:16526', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16526'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0091?


Explain the CVE ID: What does the identifier CVE-2013-0092 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0092.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer GetMarkupPtr Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0092?

{'name': 'oval:org.mitre.oval:def:16324', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16324'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0092?


Explain the CVE ID: What does the identifier CVE-2013-0093 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0093.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer onBeforeCopy Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0093?

{'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}, {'name': 'oval:org.mitre.oval:def:16239', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16239'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0093?


Explain the CVE ID: What does the identifier CVE-2013-0094 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0094.

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer removeChild Use After Free Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0094?

{'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-021'}, {'name': 'oval:org.mitre.oval:def:16634', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16634'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0094?


Explain the CVE ID: What does the identifier CVE-2013-0095 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0095.

Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a remote URL and consequently confirm the rendering of an HTML e-mail message by including unspecified HTML5 elements and leveraging the installation of a WebKit browser on the victim's machine, aka "Unintended Content Loading Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0095?

{'name': 'oval:org.mitre.oval:def:16082', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16082'}, {'name': 'TA13-071A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-071A'}, {'name': 'MS13-026', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-026'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0095?


Explain the CVE ID: What does the identifier CVE-2013-0096 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0096.

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2013-0096?

{'name': 'TA13-134A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/ncas/alerts/TA13-134A'}, {'name': 'MS13-045', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-045'}, {'name': 'oval:org.mitre.oval:def:16204', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16204'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0096?


Explain the CVE ID: What does the identifier CVE-2013-0097 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0097.


Provide references for further information: Can you share references or external links related to CVE-2013-0097?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0097?


Explain the CVE ID: What does the identifier CVE-2013-0098 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0098.


Provide references for further information: Can you share references or external links related to CVE-2013-0098?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0098?


Explain the CVE ID: What does the identifier CVE-2013-0099 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0099.


Provide references for further information: Can you share references or external links related to CVE-2013-0099?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0099?


Explain the CVE ID: What does the identifier CVE-2013-0100 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0100.


Provide references for further information: Can you share references or external links related to CVE-2013-0100?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0100?


Explain the CVE ID: What does the identifier CVE-2013-0107 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0107.

Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote attackers to execute arbitrary code via a crafted document containing instructions that reconstruct a certain security cookie.


Provide references for further information: Can you share references or external links related to CVE-2013-0107?

{'name': 'VU#275219', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/275219'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0107?


Explain the CVE ID: What does the identifier CVE-2013-0108 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0108.

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager (aka CPO-M) Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code via a crafted HTML document.


Provide references for further information: Can you share references or external links related to CVE-2013-0108?

{'tags': ['x_refsource_MISC'], 'url': 'http://ics-cert.us-cert.gov/pdf/ICSA-13-053-02.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0108?


Explain the CVE ID: What does the identifier CVE-2013-0109 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0109.

The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service (memory overwrite) via a crafted application.


Provide references for further information: Can you share references or external links related to CVE-2013-0109?

{'name': 'VU#957036', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/957036'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nvidia.com/object/product-security.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0109?


Explain the CVE ID: What does the identifier CVE-2013-0110 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0110.

nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.


Provide references for further information: Can you share references or external links related to CVE-2013-0110?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0110?


Explain the CVE ID: What does the identifier CVE-2013-0111 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0111.

daemonu.exe (aka the NVIDIA Update Service Daemon), as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.


Provide references for further information: Can you share references or external links related to CVE-2013-0111?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0111?


Explain the CVE ID: What does the identifier CVE-2013-0113 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0113.

Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.


Provide references for further information: Can you share references or external links related to CVE-2013-0113?

{'name': 'VU#248449', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/248449'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0113?


Explain the CVE ID: What does the identifier CVE-2013-0118 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0118.

CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value of the merchant's e-mail address, as demonstrated by setting the recipient to one's self.


Provide references for further information: Can you share references or external links related to CVE-2013-0118?

{'name': 'VU#583564', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/583564'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/BLUU-949PQL'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0118?


Explain the CVE ID: What does the identifier CVE-2013-0120 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0120.

The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service (device crash) via a malformed request.


Provide references for further information: Can you share references or external links related to CVE-2013-0120?

{'name': 'VU#160460', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/160460'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0120?


Explain the CVE ID: What does the identifier CVE-2013-0122 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0122.

The avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with zero arguments.


Provide references for further information: Can you share references or external links related to CVE-2013-0122?

{'name': 'VU#131263', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/131263'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0122?


Explain the CVE ID: What does the identifier CVE-2013-0123 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0123.

Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL commands via (1) the nHistoryId parameter to WebProd/pages/pgHistory.asp or (2) the OrderBy parameter to WebProd/pages/pgadmin.asp.


Provide references for further information: Can you share references or external links related to CVE-2013-0123?

{'name': 'VU#406596', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/406596'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0123?


Explain the CVE ID: What does the identifier CVE-2013-0124 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0124.

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the (1) Number or (2) UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll.


Provide references for further information: Can you share references or external links related to CVE-2013-0124?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0124?


Explain the CVE ID: What does the identifier CVE-2013-0125 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0125.

Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML via the File parameter.


Provide references for further information: Can you share references or external links related to CVE-2013-0125?

{'name': 'VU#418923', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/418923'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0125?


Explain the CVE ID: What does the identifier CVE-2013-0126 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0126.

Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrative accounts via the username and user_level parameters or (2) enable remote administration via the is_telnet_primary and is_telnet_secondary parameters.


Provide references for further information: Can you share references or external links related to CVE-2013-0126?

{'name': 'VU#278204', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/278204'}, {'name': '24860', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/24860/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0126?


Explain the CVE ID: What does the identifier CVE-2013-0127 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0127.

IBM Lotus Notes 8.x before 8.5.3 FP4 Interim Fix 1 and 9.0 before Interim Fix 1 does not block APPLET elements in HTML e-mail, which allows remote attackers to bypass intended restrictions on Java code execution and X-Confirm-Reading-To functionality via a crafted message, aka SPRs JMOY95BLM6 and JMOY95BN49.


Provide references for further information: Can you share references or external links related to CVE-2013-0127?

{'name': '20130501 n.runs-SA-2013.005 - IBM Lotus Notes - arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2013/Apr/262'}, {'name': 'VU#912420', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/912420'}, {'name': 'ibm-notes-applet-tags(83775)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/83775'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21633819'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0127?


Explain the CVE ID: What does the identifier CVE-2013-0128 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0128.

The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file e-mail message with unencrypted credentials, which allows remote attackers to obtain sensitive information by sniffing the network or leveraging access to an e-mail endpoint.


Provide references for further information: Can you share references or external links related to CVE-2013-0128?

{'name': 'VU#704916', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/704916'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0128?


Explain the CVE ID: What does the identifier CVE-2013-0129 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0129.

Multiple cross-site scripting (XSS) vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script or HTML via (1) the WebFTP Overview "Create new directory" field or (2) the body of an e-mail autoresponder message.


Provide references for further information: Can you share references or external links related to CVE-2013-0129?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pdadmin-forum.de/thread.php?threadid=4051'}, {'name': 'VU#311644', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/311644'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0129?


Explain the CVE ID: What does the identifier CVE-2013-0130 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0130.

Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service (application crash) via a long directory name in a (1) DELE, (2) LIST, or (3) VIEW command.


Provide references for further information: Can you share references or external links related to CVE-2013-0130?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.coreftp.com/forums/viewtopic.php?t=222102'}, {'name': 'VU#370868', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/370868'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0130?


Explain the CVE ID: What does the identifier CVE-2013-0131 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0131.

Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.


Provide references for further information: Can you share references or external links related to CVE-2013-0131?

{'name': 'GLSA-201304-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-201304-01.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nvidia.com/object/product-security.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/3290'}, {'name': 'VU#771620', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/771620'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0131?


Explain the CVE ID: What does the identifier CVE-2013-0132 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0132.

The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attackers to execute arbitrary PHP code via a request containing crafted environment variables.


Provide references for further information: Can you share references or external links related to CVE-2013-0132?

{'name': 'VU#310500', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/310500'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0132?


Explain the CVE ID: What does the identifier CVE-2013-0133 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0133.

Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable.


Provide references for further information: Can you share references or external links related to CVE-2013-0133?


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0133?


Explain the CVE ID: What does the identifier CVE-2013-0134 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0134.

Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML via a crafted text message that is transmitted by a managed phone.


Provide references for further information: Can you share references or external links related to CVE-2013-0134?

{'name': 'VU#557252', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/557252'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2013-0134?


Explain the CVE ID: What does the identifier CVE-2013-0135 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0135.

Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addressbook/register/edit_user.php, or (3) addressbook/register/edit_user_save.php; the email parameter to (4) addressbook/register/edit_user_save.php, (5) addressbook/register/reset_password.php, (6) addressbook/register/reset_password_save.php, or (7) addressbook/register/user_add_save.php; the username parameter to (8) addressbook/register/checklogin.php or (9) addressbook/register/reset_password_save.php; the (10) lastname, (11) firstname, (12) phone, (13) permissions, or (14) notes parameter to addressbook/register/edit_user_save.php; the (15) q parameter to addressbook/register/admin_index.php; the (16) site parameter to addressbook/register/linktick.php; the (17) password parameter to addressbook/register/reset_password.php; the (18) password_hint parameter to addressbook/register/reset_password_save.php; the (19) var parameter to addressbook/register/traffic.php; or a (20) BasicLogin cookie to addressbook/register/router.php.