Lucene search
HistoryApr 09, 2013 - 10:55 p.m.
CVE-2013-0078
cve-2013-0078
microsoft antimalware
windows defender
windows 8
windows rt
privilege escalation
vulnerability
6.6 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
22.6%
The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka “Microsoft Antimalware Improper Pathname Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_defender | microsoft windows defender | eq | * |
Related
openvas
openvas
Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)
2013-04-10 00:00:00
Microsoft Antimalware Client Privilege Elevation Vulnerability (2823482)
2013-04-10 00:00:00
securityvulns
securityvulns
Microsoft Antimalware privilege escalation
2013-05-06 00:00:00
prion
prion
Improper access control
2013-04-09 22:55:00
nessus
nessus
cvelist
cvelist
CVE-2013-0078
2013-04-09 22:00:00
6.6 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
22.6%
Related for CVE-2013-0078