CVE-2013-3859 - Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."

Back Back to CVE browser

MEDIUM

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."

Published Sep 11, 2013

6.9

MEDIUM

CVSS 2.0

EPSS 1.65%

Description

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://www.us-cert.gov/ncas/alerts/TA13-253A
third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075
vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3791
Advisory

Link	Providers	Tags
http://www.us-cert.gov/ncas/alerts/TA13-253A		third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-075		vendor-advisoryx_refsource_MS
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-3791		Advisory