VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 9, 2013· Updated Jun 16, 2026

CVE-2013-3128

CVE-2013-3128

Description

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

25
  • Microsoft/.net Framework6 versions
    cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*
    • (no CPE)range: 3.0 SP2, 3.5, 3.5.1, 4, 4.5
  • Microsoft/Windows 72 versions
    cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x86:*
  • Microsoft/Windows 82 versions
    cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:x86:*
  • Microsoft/Windows Rt 8.1
    cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 20033 versions
    cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:*
    • cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:*
  • Microsoft/Windows Server 20085 versions
    cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*+ 4 more
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:itanium:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
  • Microsoft/Windows Server 2012
    cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
  • Microsoft/Windows3 versions
    cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*
    • (no CPE)range: XP SP2, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012, RT
  • Microsoft/Windows Xp2 versions
    cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:*
    • cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.