CVE Database
/

CVE-2013-3167

Back to search

CVE-2013-3167

Published: Jul 10, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

TA13-190A
third-party-advisory
x_refsource_CERT
MS13-053
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:17293
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now