Microsoft ActiveX InformationCardSigninHelper Vulnerability

Last Update Date: 13 Nov 2013 17:03 Release Date: 13 Nov 2013 3728 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

TYPE: Windows OS

A remote code execution vulnerability exists in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

Impact

Remote Code Execution

System / Technologies affected

Windows XP
Windows XP Professional
Windows Vista
Windows Server 2008
Windows 7
Windows Server 2008 R2
Windows 8 and Windows 8.1
Windows Server 2012 and Windows Server 2012 R2
Windows RT and Windows RT 8.1

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
https://technet.microsoft.com/en-us/security/bulletin/ms13-090

Vulnerability Identifier

CVE-2013-3918

Source

Microsoft

Related Link

https://technet.microsoft.com/en-us/security/bulletin/ms13-090

Share with

Microsoft Windows Graphics Device Interface Remote Code Execution Vulnerability

13 Nov 2013 3343 Views

Microsoft Office Remote Code Execution Vulnerabilities

13 Nov 2013 3295 Views