« Volver al listado

CVE-2013-3859

Estado: ModificadaMedia (6.9)—

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Microsoft — OfficeMicrosoft — Pinyin IME

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3859",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-09-11T14:03:48.307",
  "references": [
    {
      "url": "http://www.us-cert.gov/ncas/alerts/TA13-253A",
      "tags": [
        "US Government Resource"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.us-cert.gov/ncas/alerts/TA13-253A",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka \"Chinese IME Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft Pinyin IME 2010, cuando es utilizado en conjunto con Microsoft Office 2010 SP1, no restringe las opciones de configuración apropiadamente, lo que permite a usuarios locales conseguir privilegios arrancando Internet Explorer desde la barra de herramientas IME, tambien conocido como \"Vulnerabilidad IME Chino\"."
    }
  ],
  "lastModified": "2026-06-16T23:55:55.020",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:office:2010:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9932C177-FCBB-4AD1-A42A-1FAB28F392F3"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2010:sp1:x64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8239CEF1-BD02-4ACE-A0C2-75A9EAA15914"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:office:2010:sp1:x86:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8383FADC-9391-4570-AAF9-92A952A4F04F"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:*:x64:*",
              "vulnerable": true,
              "matchCriteriaId": "81AA94DF-177C-430E-B260-E425F9B2811A"
            },
            {
              "criteria": "cpe:2.3:a:microsoft:pinyin_ime:2010:*:*:*:*:x86:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62964888-CBEB-4A3B-ADBD-07428A1CD2CC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}