CVE-2013-3906 | Netskope Threat Labs

Description

This detection identifies exploitation attempts targeting CVE-2013-3906, which has a HIGH severity rating. GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote cyberattackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.

Stats

First seen: February 2022
Last seen: October 2026

CVEs

CVE-2013-3906

Alert name variants

Alert Name	Engine
Document-OLE.Exploit.CVE-2013-3906	ATP Sandbox Adv. Heuristics
Document-Word.Exploit.CVE-2013-3906	ATP Sandbox Adv. Heuristics
Exploit.CVE-2013-3906.Gen	AV
Image-TIFF.Exploit.CVE-2013-3906	ATP Sandbox Adv. Heuristics
Win32.Exploit.CVE-2013-3906	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
Microsoft Windows and Office TIFF Handling GDI Memory Corruption (Published Exploit)	IPS-CFWIPS-SWG

References

nvd.nist.gov