CVE-2013-6791

Published: Nov 29, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming (ROP) attack.

Affected (1)

Products: Microsoft: Enhanced Mitigation Experience Toolkit

1 product

Enhanced Mitigation Experience Toolkit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Enhanced Mitigation Experience Toolkit	Up to 3.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://blogs.technet.com/b/srd/archive/2013/06/17/emet-4-0-now-available-for-download.aspx

Source: cve@mitre.org

Patch

http://en.nsfocus.com/advisories/1301.html

Source: cve@mitre.org

http://www.securitytracker.com/id/1029411

Source: cve@mitre.org

http://blogs.technet.com/b/srd/archive/2013/06/17/emet-4-0-now-available-for-download.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://en.nsfocus.com/advisories/1301.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1029411

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.