Lucene search

K
cve[email protected]CVE-2013-1287
HistoryMar 13, 2013 - 12:55 a.m.

CVE-2013-1287

2013-03-1300:55:01
CWE-264
web.nvd.nist.gov
32
cve-2013-1287
usb drivers
windows
arbitrary code execution
vulnerability

7.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

48.4%

The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka “Windows USB Descriptor Vulnerability,” a different vulnerability than CVE-2013-1285 and CVE-2013-1286.

Affected configurations

NVD
Node
microsoftwindows_xpsp3
OR
microsoftwindows_xpMatch-sp2x64
Node
microsoftwindows_server_2003sp2
Node
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatch-sp2
Node
microsoftwindows_server_2008sp2x64
OR
microsoftwindows_server_2008sp2x86
OR
microsoftwindows_server_2008Match-sp2itanium
Node
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
Node
microsoftwindows_server_2008r2itanium
OR
microsoftwindows_server_2008r2x64
Node
microsoftwindows_8Match--x64
OR
microsoftwindows_8Match--x86
Node
microsoftwindows_server_2012Match-

7.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

48.4%