CVE-2013-0077

Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in 1 a media file, 2 a media stream, or 3 a Microsoft Office document, aka "Media Decompression Vulnerability."...

CVE-2013-1252

CVE-2013-1252 describes a race condition in the Windows kernel-mode driver win32k.sys that lets local attackers gain privileges and read arbitrary kernel memory on affected Windows families (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1). Root cause: race condition in ...

CVE-2013-1263

CVE-2013-1263 involves a race condition in the Windows kernel‑mode driver win32k.sys that permits local privilege escalation and reading of arbitrary kernel memory. Affected products (per sources) include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 S...

CVE-2013-1268

CVE-2013-1268 is a race-condition flaw in the Windows kernel-mode driver win32k.sys that enables local privilege escalation. A crafted user-space application can trigger the vulnerability to gain privileges and read arbitrary kernel memory. Affected Windows versions include XP SP2/SP3, Server 200...

CVE-2013-1266

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

CVE-2013-1257

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

CVE-2013-1267

CVE-2013-1267 describes a race condition in the win32k.sys kernel-mode driver that can be exploited locally to gain privileges and read arbitrary kernel memory. Affected platforms include Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1, as indicated in the pr...

CVE-2013-1269

The CVE-2013-1269 entry tracks a race condition in the Windows kernel-mode driver win32k.sys that enables local privilege escalation and arbitrary kernel memory disclosure. Affected products include Microsoft Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 200...

CVE-2013-1251

CVE-2013-1251 describes a race condition in the Windows kernel-mode driver win32k.sys that enables local privilege escalation and potential reading of arbitrary kernel memory. Affected products and versions include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 200...

CVE-2013-1258

CVE-2013-1258 is a race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The vulnerability allows local users to gain privileges and read arbitrary kernel memory via a crafted application. Mul...

CVE-2013-1248

CVE-2013-1248 is a race-condition in win32k.sys (Windows kernel-mode driver) that enables local privilege escalation and kernel-memory disclosure across multiple Windows versions (XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7, 8, Server 2012, Windows RT). Root cause desc...

CVE-2013-1266

CVE-2013-1266 is a race-condition vulnerability in the Windows kernel-mode driver win32k.sys that allows local privilege escalation and potential kernel memory disclosure. It affects multiple Windows editions listed in MS13-016 (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows ...

CVE-2013-1249

The CVE-2013-1249 entry describes a race condition in the Windows kernel-mode driver win32k.sys that could allow local privilege escalation and arbitrary kernel memory reads. Affected products include multiple Windows versions from XP SP2/SP3 to Windows 8 and Windows Server 2012 (as cited in MS13...

CVE-2013-1263

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

CVE-2013-1272

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

CVE-2013-1253

The CVE concerns a race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The underlying flaw allows local attackers to escalate privileges and read arbitrary kernel memory via a crafted applic...

CVE-2013-1313

CVE-2013-1313 corresponds to an OLE Automation use-after-parse in Windows XP SP3 where memory misallocation enables remote code execution via a crafted RTF document. Connected advisories note this as a code-execution vulnerability in Windows Common Controls (OLE) with remote impact. Mitigation pe...

CVE-2013-1250

CVE-2013-1250 is a race-condition-based local privilege-escalation flaw in the Windows kernel-mode driver win32k.sys. Affected software (per PT-2013-3009) includes Windows XP SP2–SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2–R2 SP1, and Windows 7 Gold–SP1. The vulnerabi...

CVE-2013-1279

CVE-2013-1279 is described as a kernel race condition in Microsoft Windows platforms, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. The vulnerability arises from race conditions ...

CVE-2013-1262

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...