PT-2013-3043 · Microsoft · Windows+2

Published 2013-04-09 · Updated 2018-10-12 · CVE-2013-1284

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server versions prior to the fixed version Windows RT versions prior to the fixed version

Description The issue is related to a race condition in the kernel that allows local users to gain privileges via a crafted application. This is due to the improper handling of objects in memory by the Windows kernel. An attacker who successfully exploits this could gain elevated privileges and read arbitrary amounts of kernel memory.

Recommendations For Microsoft Windows versions prior to the fixed version, update to the latest version to resolve the issue. For Windows Server versions prior to the fixed version, update to the latest version to resolve the issue. For Windows RT versions prior to the fixed version, update to the latest version to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2013-1284

Affected Products

Windows

Windows Rt

Windows Server

References · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1284 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1284 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16455 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms13-031 · Note
• http://us-cert.gov/ncas/alerts/TA13-100A · Note