(MS13-071) Vulnerability in Windows Theme File Could Allow Remote Code Execution (2864063)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2013-0810

  Advisory Date: SEP 18, 2013

---

  DESCRIPTION

This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user applies a specially crafted Windows theme on their system. In all cases, a user cannot be forced to open the file or apply the theme; for an attack to be successful, a user must be convinced to do so.

  SOLUTION

  PATCH: https://technet.microsoft.com/en-us/security/bulletin/ms13-071

  AFFECTED SOFTWARE AND VERSION

• Windows XP Professional x64 Edition Service Pack 2
• Windows Server 2003 Service Pack 2
• Windows Vista Service Pack 2
• Windows Vista x64 Edition Service Pack 2
• Windows Server 2008 for Itanium-based Systems Service Pack 2
• Windows XP Service Pack 3
• Windows Server 2003 x64 Edition Service Pack 2
• Windows Server 2003 with SP2 for Itanium-based Systems
• Windows Server 2008 for 32-bit Systems Service Pack 2
• Windows Server 2008 for x64-based Systems Service Pack 2

Related Vulnerability

• September 2013 - Microsoft Releases 14 Security Advisories