{"uuid": "9a3d441e-57b6-4258-8553-5b37316166fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms13_071_theme.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Eduardo Prado\", \"juan vazquez \", \"Matthew Hall \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows\\n          2003. The vulnerability exists in the handling of the Screen Saver path, in the [boot]\\n          section. An arbitrary path can be used as screen saver, including a remote SMB resource,\\n          which allows for remote code execution when a malicious .theme file is opened, and the\\n          \\\"Screen Saver\\\" tab is viewed. The code execution is also triggered if the victim installs\\n          the malicious theme and stays away from the computer, when Windows tries to display the\\n          screensaver.\", \"disclosure_date\": \"2013-09-10\", \"fullname\": \"exploit/windows/fileformat/ms13_071_theme\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms13_071_theme.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/fileformat/ms13_071_theme\", \"references\": [\"CVE-2013-0810\", \"OSVDB-97136\", \"MSB-MS13-071\", \"BID-62176\", \"URL-http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1040\", \"URL-https://www.rapid7.com/blog/post/2013/09/25/change-the-theme-get-a-shell\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP SP3 / Windows 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:28.445880Z"}