Back to CVE Browser

CVE-2013-0810

HIGH

8.1

CVSS Severity Score

EPSS Score0.0180%

EPSS Percentile17.39th

PublishedSep 11, 2013

Last ModifiedApr 29, 2026

Vulnerability Description

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, and Windows Server 2008 SP2 allow remote attackers to execute arbitrary code via a crafted screensaver in a theme file, aka "Windows Theme File Remote Code Execution Vulnerability."

Affected Platforms (CPE)

💻

Microsoft

Windows Server 2003

All versions

💻

Microsoft

Windows Server 2008

All versions

💻

Microsoft

Windows Server 2008

All versions

💻

Microsoft

Windows Server 2008

All versions

💻

Microsoft

Windows Vista

All versions

💻

Microsoft

Windows Xp

All versions

💻

Microsoft

Windows Xp

All versions

References & Advisories

🔗 http://www.us-cert.gov/ncas/alerts/TA13-253A

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-071

🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18579

🔗 http://www.us-cert.gov/ncas/alerts/TA13-253A

🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-071

🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18579

Related Vulnerabilities

CVE-2004-042010.0

The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows ...

CVE-2004-020110.0

Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Serve...

CVE-2003-114210.0

Help in NIPrint LPD-LPR Print Server 4.10 and earlier executes Windows Explorer with SYSTEM privileges, which allows local users t...

CVE-2004-020910.0

Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 al...