CVE-2013-2556 is an unspecified vulnerability affecting Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 through SP1. This flaw allows attackers to bypass the Address Space Layout Randomization (ASLR) protection mechanism through unknown vectors, as demonstrated during the Pwn2Own 2013 competition. With a CVSS score of 7.5, this vulnerability is considered highly severe, indicating a network-based attack with low complexity that could lead to partial compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score of 94/100 further emphasizes its critical nature. While there is no indication of active exploitation in the KEV catalog, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB, the vulnerability garnered significant attention with one media article and one community discussion mention, both exceeding the average for CVEs.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:* | ||
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.