Lucene search

MicrosoftCVE-2013-1283

HistoryApr 09, 2013 - 10:55 p.m.

CVE-2013-1283

2013-04-0922:55:01

CWE-362

microsoft

web.nvd.nist.gov

security

vulnerability

win32k.sys

race condition

privilege escalation

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

Percentile

13.4%

JSON

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka “Win32k Race Condition Vulnerability.”

Affected configurations

Nvd

Node

microsoftwindows_7x64

microsoftwindows_7x86

microsoftwindows_7sp1x64

microsoftwindows_7sp1x86

microsoftwindows_8Match--x64

microsoftwindows_8Match--x86

microsoftwindows_rtMatch-

microsoftwindows_server_2003sp2

microsoftwindows_server_2008r2itanium

microsoftwindows_server_2008r2x64

microsoftwindows_server_2008sp2itanium

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008sp2x86

microsoftwindows_server_2012Match-

microsoftwindows_vistasp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

VendorProductVersionCPE
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
microsoftwindows_8-cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*
microsoftwindows_8-cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*
microsoftwindows_rt-cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7:::x64:::::*
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7:::x86:::::*
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7::sp1:x64:::::
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7::sp1:x86:::::
microsoft	windows_8	-	cpe:2.3:o:microsoft:windows_8:-:-:x64:::::*
microsoft	windows_8	-	cpe:2.3:o:microsoft:windows_8:-:-:x86:::::*
microsoft	windows_rt	-	cpe:2.3:o:microsoft:windows_rt:-:::::::*
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::r2:itanium:::::
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::r2:x64:::::