CVE-2013-3906
Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
Vulnerability Description
GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.
Affected Platforms (CPE)
📦
Microsoft
Excel Viewer
All versions📦
Microsoft
Lync
= 2010📦
Microsoft
Lync
= 2013📦
Microsoft
Office
= 2003📦
Microsoft
Office
= 2007📦
Microsoft
Office
= 2010📦
Microsoft
Office
= 2010📦
Microsoft
Office Compatibility Pack
All versions📦
Microsoft
Powerpoint Viewer
= 2010📦
Microsoft
Powerpoint Viewer
= 2010📦
Microsoft
Word Viewer
All versions💻
Microsoft
Windows Server 2008
All versions💻
Microsoft