PT-2013-3052 · Microsoft · Windows Vista+5

Published 2013-04-09 · Updated 2023-12-07 · CVE-2013-1293

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 Gold Microsoft Windows 7 SP1

Description The issue allows local users to gain privileges or cause a denial of service via a crafted application that leverages improper handling of objects in memory. An elevation of privilege vulnerability exists when the NTFS kernel-mode driver improperly handles objects in memory, allowing an attacker to run arbitrary code in kernel mode. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full administrative rights.

Recommendations For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 Gold, update to a newer version to mitigate the risk. For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the NTFS kernel-mode driver to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2013-1293

Affected Products

Ntfs Kernel-Mode Driver

Windows

Windows 7

Windows Server 2008

Windows Server 2008 R2

Windows Vista

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-1293 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-036 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1293 · Security Note
• http://technet.microsoft.com/en-us/security/bulletin/ms13-036 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16485 · Note