PT-2013-2080 · Microsoft · Windows Server 2008 R2+2

Publicado 2013-02-13 · Atualizado 2020-09-28 · CVE-2013-0076

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1

Description The issue arises from the improper handling of objects in memory by the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists when the Windows CSRSS improperly handles objects in memory, enabling an attacker to run arbitrary code in the context of the local system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, apply the necessary patch to fix the improper handling of objects in memory by the CSRSS. For Microsoft Windows 7 Gold and SP1, apply the necessary patch to fix the improper handling of objects in memory by the CSRSS. As a temporary workaround, consider restricting access to the CSRSS to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-0076

Produtos afetados

Windows 7

Windows Server 2008 R2

Windows

Referências · 6

• http://us-cert.gov/cas/techalerts/TA13-043B.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16478 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-019 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-0076 · Nota de Segurança
• http://technet.microsoft.com/en-us/security/bulletin/ms13-019 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0076 · Nota de Segurança