PoC Index

CVE-2013-3870

HIGH 9.3EPSS 18.6%

Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including many nested S/MIME certificates in an e-mail message, aka "Message Certificate Vulnerability."

CVSS v2.0
9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
18.64% chance of exploitation in the next 30 days, 97th percentile
Published
2013-09-11
Updated
2024-08-06

Proof-of-concept exploits (1)

References

Related