CVE-2013-1346

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://technet.microsoft.com/security/advisory/2846338Patch, Vendor Advisory
http://technet.microsoft.com/security/advisory/2846338Patch, Vendor Advisory

Timeline

Published: May 15, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-13478.8Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessi CVE-2013-13487.5The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote attackers to execute arbitrary PHP code via a PHP file, a different vulnerabi CVE-2013-13497.5Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname pa CVE-2013-13509.1Verax NMS prior to 2.1.0 has multiple security bypass vulnerabilities CVE-2013-13515.9Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.CVE-2013-13527.5Verax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive.CVE-2013-13535.4Orange HRM 2.7.1 allows XSS via the vacancy name.CVE-2013-13599.8An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Un CVE-2013-13609.8An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Un CVE-2013-13619.3Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users,CVE-2013-13627.5Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor (NRPE) before 2.14 might allow remote attackers to execute ar CVE-2013-13645.0The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf p