Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-3956
HistoryJul 31, 2013 - 1:20 p.m.

CVE-2013-3956

2013-07-3113:20:28
CWE-264
[email protected]
web.nvd.nist.gov
1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON

The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.

Affected configurations

NVD
Node
novellclientMatch4.91sp5
AND
microsoftwindows_2003_server
OR
microsoftwindows_xp
Node
novellclientMatch2.0sp2
AND
microsoftwindows_server_2008Match-
OR
microsoftwindows_vista
Node
novellclientMatch2.0sp3
AND
microsoftwindows_7
OR
microsoftwindows_8Match--x64
OR
microsoftwindows_8Match--x86
OR
microsoftwindows_server_2008Matchr2

Related

cvelist 1
prion 1
canvas 1
cve 1
nessus 1
mmpc 1
mssecure 2
threatpost 1
rapid7blog 1
cvelist
cvelist
CVE-2013-3956
2013-07-31 10:00:00
prion
prion
Code injection
2013-07-31 13:20:00
canvas
canvas
Immunity Canvas: NOVELL_NICM
2013-07-31 13:20:00
cve
cve
CVE-2013-3956
2013-07-31 13:20:28
nessus
nessus
Novell Client / Client 2 Multiple Vulnerabilities
2013-09-03 00:00:00
mmpc
mmpc
Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center
2021-12-08 17:00:58
mssecure
mssecure
Secured-core PCs: A brief showcase of chip-to-cloud security against kernel attacks
2020-03-17 16:00:49
Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center
2021-12-08 17:00:58
threatpost
threatpost
BYO-Bug Tactic Attacks Windows Kernel with Outdated Driver
2020-02-10 21:07:34
rapid7blog
rapid7blog
Driver-Based Attacks: Past and Present
2021-12-13 14:00:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

JSON
Related for NVD:CVE-2013-3956
cvelist1prion1canvas1cve1nessus1mmpc1mssecure2threatpost1rapid7blog1