VULNERABILITY INTELLIGENCE

CVE-2013-3859

CVSS score6.9 MEDIUM
EPSS probability1.65%
CISA KEVNot currently listed
Published2013-09-11
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka "Chinese IME Vulnerability."

Primary references