CVE-2013-3900

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900Patch
• http://blogs.technet.com/b/srd/archive/2013/12/10/ms13-098-update-to-enhance-the-security-of-authenticode.aspxBroken Link
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-098Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900Patch
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-3900US Government Resource