PT-2013-2080 · Microsoft · Windows Server 2008 R2+2

Published 2013-02-13 · Updated 2020-09-28 · CVE-2013-0076

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 and R2 SP1 Microsoft Windows 7 Gold and SP1

Description The issue arises from the improper handling of objects in memory by the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists when the Windows CSRSS improperly handles objects in memory, enabling an attacker to run arbitrary code in the context of the local system. The attacker could then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Server 2008 R2 and R2 SP1, apply the necessary patch to fix the improper handling of objects in memory by the CSRSS. For Microsoft Windows 7 Gold and SP1, apply the necessary patch to fix the improper handling of objects in memory by the CSRSS. As a temporary workaround, consider restricting access to the CSRSS to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2013-0076

Affected Products

Windows 7

Windows Server 2008 R2

Windows

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-019 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0076 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0076 · Security Note
• http://us-cert.gov/cas/techalerts/TA13-043B.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16478 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms13-019 · Note