AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-3940

HIGH · CVSS 9.3 EPSS 34.45%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-11-13 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It affects Microsoft, Windows. Its EPSS score suggests a 34.5% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2013-3940
Severity
HIGH
CVSS
9.3
EPSS
34.45%
Microsoft Windows

Original NVD Description

Integer overflow in the Graphics Device Interface (GDI) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image in a Windows Write (.wri) document, which is not properly handled in WordPad, aka "Graphics Device Interface Integer Overflow Vulnerability."