Microsoft · Windows Server 2008 R2 · CVE-2013-3154
**Name of the Vulnerable Software and Affected Versions**
Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2
**Description**
The issue concerns the signature-update functionality in Windows Defender, which relies on an incorrect pathname. This allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory.
**Recommendations**
For Windows 7 and Windows Server 2008 R2, update Windows Defender to a version that corrects the pathname issue.
As a temporary workaround, consider restricting access to the %SYSTEMDRIVE% top-level directory to minimize the risk of exploitation.