Lucene search
HistoryFeb 13, 2013 - 12:04 p.m.
CVE-2013-0076
cve-2013-0076
reference count vulnerability
microsoft
windows server 2008 r2
windows 7 gold
nvd
security
local privilege escalation
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.7%
The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka “Reference Count Vulnerability.”
Affected configurations
Node
microsoftwindows_7x64
ORmicrosoftwindows_7x86
ORmicrosoftwindows_7sp1x64
ORmicrosoftwindows_7sp1x86
ORmicrosoftwindows_server_2008r2itanium
ORmicrosoftwindows_server_2008r2x64
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_7 | microsoft windows 7 | eq | * |
| microsoft:windows_server_2008 | microsoft windows server 2008 | eq | * |
Related
mskb
mskb
symantec
symantec
cvelist
cvelist
CVE-2013-0076
2013-02-13 11:00:00
nvd
nvd
CVE-2013-0076
2013-02-13 12:04:12
nessus
nessus
openvas
openvas
prion
prion
Design/Logic Flaw
2013-02-13 12:04:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2013-03-02 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.7%
Related for CVE-2013-0076