CVE

Id
63114  
CVE No.
CVE-2013-3167  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."  
Phase
Assigned (20130417)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
628162 63114 CVE-2013-3167 MS:MS13-053  View
628163 63114 CVE-2013-3167 URL:http://technet.microsoft.com/security/bulletin/MS13-053  View
628164 63114 CVE-2013-3167 CERT:TA13-190A  View
628165 63114 CVE-2013-3167 URL:http://www.us-cert.gov/ncas/alerts/TA13-190A  View
628166 63114 CVE-2013-3167 OVAL:oval:org.mitre.oval:def:17293  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21690 JVNDB-2013-003265 複数の Microsoft Windows 製品のカーネルモード ドライバーの win32k.sys におけるバッファオーバーフローの脆弱性 複数の Microsoft Windows 製品のカーネルモード ドライバーの win32k.sys には、バッファオーバーフローの脆弱性が存在します。 CVE-2013-3172 63114 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003265.html  View