CVE-2013-1305

CVE-2013-1305 affects Microsoft Windows HTTP.sys in Windows 8, Windows Server 2012, and Windows RT. The flaw arises when HTTP.sys handles a crafted HTTP header, allowing a remote attacker to trigger an infinite loop in the HTTP header parser and cause a denial-of-service condition on vulnerable s...

CVE-2013-2558

Technical details about CVE-2013-2558 are not publicly provided in the supplied documents; no concrete affected products/versions/fixes are specified here. Monitor for updates.

CVE-2013-3907

CVE-2013-3907 affects portcls.sys, the audio port-class driver in Windows kernel-mode, across multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, Windows RT). The issue is a local privilege-escalation vulnerability described as the Port-Class Driv...

CVE-2013-3197

The CVE-2013-3197 issue affects the NTVDM subsystem in the Windows kernel on 32‑bit Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8. It arises from improper validation of kernel-memory addresses, enabling local privilege escalation...