VULNERABILITY INTELLIGENCE
CVE-2013-6791
CVSS score4.3 MEDIUM
EPSS probability4.60%
CISA KEVNot currently listed
Published2013-11-29
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming (ROP) attack.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor