Lucene search

MicrosoftCVE-2013-1265

HistoryFeb 13, 2013 - 12:04 p.m.

CVE-2013-1265

2013-02-1312:04:13

CWE-362

microsoft

web.nvd.nist.gov

cve-2013-1265

win32k.sys

kernel-mode drivers

microsoft windows

local privilege escalation

arbitrary kernel memory

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

19.8%

JSON

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.

Affected configurations

Nvd

Node

microsoftwindows_7x64

microsoftwindows_7x86

microsoftwindows_7sp1x64

microsoftwindows_7sp1x86

microsoftwindows_server_2003sp2

microsoftwindows_server_2008r2itanium

microsoftwindows_server_2008r2x64

microsoftwindows_server_2008sp2itanium

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008sp2x86

microsoftwindows_vistasp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

VendorProductVersionCPE
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7:::x64:::::*
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7:::x86:::::*
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7::sp1:x64:::::
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7::sp1:x86:::::
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::r2:itanium:::::
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::r2:x64:::::
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::sp2:itanium:::::
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::sp2:x64:::::
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::sp2:x86:::::