PT-2013-3043 · Microsoft · Windows+2

Publicado 2013-04-09 · Atualizado 2018-10-12 · CVE-2013-1284

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server versions prior to the fixed version Windows RT versions prior to the fixed version

Description The issue is related to a race condition in the kernel that allows local users to gain privileges via a crafted application. This is due to the improper handling of objects in memory by the Windows kernel. An attacker who successfully exploits this could gain elevated privileges and read arbitrary amounts of kernel memory.

Recommendations For Microsoft Windows versions prior to the fixed version, update to the latest version to resolve the issue. For Windows Server versions prior to the fixed version, update to the latest version to resolve the issue. For Windows RT versions prior to the fixed version, update to the latest version to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2013-1284

Produtos afetados

Windows

Windows Rt

Windows Server

Referências · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-031 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1284 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1284 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16455 · Nota
• http://technet.microsoft.com/en-us/security/bulletin/ms13-031 · Nota
• http://us-cert.gov/ncas/alerts/TA13-100A · Nota