CVE-2013-1346

mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of…

published May 15, 2013

CVSS
—
EPSS
12%
Percentile
96.0
In the wild
Unconfirmed
What it is

⚠️ A crafted file could trigger memory corruption in the Microsoft Malware Protection Engine, allowing remote attackers to execute arbitrary code! Think of it like a restaurant where someone slips a fake reservation under the door, and the staff unwittingly serves them a full course meal — just because they never checked the name! An attacker could potentially hijack the system, executing harmful commands or causing a service crash. This could lead to data breaches or disruptions in protective measures, leaving users vulnerable.

Put simply

Think of it like a restaurant where someone slips a fake reservation under the door, and the staff unwittingly serves them a full course meal — just because they never checked the name! This vulnerability in mpengine.dll allows remote attackers to exploit memory corruption via crafted files, enabling arbitrary code execution or denial of service on x64 platforms.

What to do

An attacker could potentially hijack the system, executing harmful commands or causing a service crash. This could lead to data breaches or disruptions in protective measures, leaving users vulnerable. Update your Microsoft Malware Protection Engine to version 1.1.9506.0 or later to patch this vulnerability. Regularly check for updates to ensure you have the latest security protections in place. You've got this! With a quick patch, you'll be back in the security game in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11636 · 96.0th percentile
Published
2013-05-15T10:00Z
EPSS history
Timeline
  • 15 MAY 10:00Z
    mpengine.dll in Microsoft Malware Protection Engine before 1.1.9506.0 on x64 platforms allows remote attackers to execute arbitrary code or cause a denial of…
    cvelistv5