PT-2013-4712 · Microsoft · Windows+4

Publicado 2013-10-09 · Atualizado 2018-10-12 · CVE-2013-3880

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the patchday that contains the fix for this issue Windows Server 2012 versions prior to the patchday that contains the fix for this issue Windows RT versions prior to the patchday that contains the fix for this issue

Description The issue allows remote attackers to bypass intended access restrictions and obtain sensitive information from a different container via a Trojan horse application. It is related to an elevation of privilege vulnerability in the Windows App Container.

Recommendations For Microsoft Windows 8, update to a version that includes the fix for this issue. For Windows Server 2012, update to a version that includes the fix for this issue. For Windows RT, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the App Container feature until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-3880

Produtos afetados

Windows

Windows 8

Windows Appcontainer

Windows Rt

Windows Server 2012

Referências · 6

• http://us-cert.gov/ncas/alerts/TA13-288A · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18912 · Nota
• http://technet.microsoft.com/en-us/security/bulletin/ms13-081 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3880 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3880 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 · Aviso do Fabricante