Product:
Windows
Summary
Microsoft is republishing CVE-2013-3900 to inform customers about the availability of the EnableCertPaddingCheck feature in supported versions of Windows 10 and Windows 11. This vulnerability allows an attacker to exploit the WinVerifyTrust function, potentially leading to remote code execution. Users with administrative rights are particularly at risk, as attackers could gain complete control of the affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2013-3900 |
Exploitation
To exploit this vulnerability, an attacker must modify a signed portable executable (PE) file to include malicious code without invalidating the signature. This requires the user or application to run or install the specially crafted PE file. If successful, the attacker can execute arbitrary code on the system, especially if the user has administrative privileges.
Affected Products
- Windows 10: All currently supported versions are affected.
- Windows 11: All currently supported versions are affected.
- Windows XP SP2 and SP3: Affected due to improper signature verification.
- Windows Server 2003 SP2: Affected due to improper signature verification.
- Windows Vista SP2: Affected due to improper signature verification.
- Windows Server 2008 SP2 and R2 SP1: Affected due to improper signature verification.
- Windows 7 SP1: Affected due to improper signature verification.
- Windows 8 and 8.1: Affected due to improper signature verification.
- Windows Server 2012 Gold and R2: Affected due to improper signature verification.
- Windows RT Gold and 8.1: Affected due to improper signature verification.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions and ensure that the EnableCertPaddingCheck registry key is set appropriately.