Lucene search

K
cve[email protected]CVE-2013-3862
HistorySep 11, 2013 - 2:03 p.m.

CVE-2013-3862

2013-09-1114:03:48
CWE-399
web.nvd.nist.gov
25
security
vulnerability
microsoft
windows 7
server 2008 r2
privilege escalation
nvd
cve-2013-3862

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.1%

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager (SCM), aka “Service Control Manager Double Free Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_7sp1x64
OR
microsoftwindows_7sp1x86
OR
microsoftwindows_server_2008r2itanium
OR
microsoftwindows_server_2008r2x64

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.1%