NVD

Id
32161  
Name
CVE-2014-4113  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, as exploited in the wild in October 2014, aka "Win32k.sys Elevation of Privilege Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-03-18  
Published
2014-10-15  
Modified Date
2017-03-13  
Seq
2014-4113  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
169134 32161 CVE-2014-4113 http://blog.trendmicro.com/trendlabs-security-intelligence/an-analysis-of-a-windows-kernel-mode-vulnerability-cve-2014-4113/  View
169135 32161 CVE-2014-4113 http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx  View
169136 32161 CVE-2014-4113 http://packetstormsecurity.com/files/131964/Windows-8.0-8.1-x64-TrackPopupMenu-Privilege-Escalation.html  View
169137 32161 CVE-2014-4113 MS14-058  View
169138 32161 CVE-2014-4113 35101  View
169139 32161 CVE-2014-4113 70364  View
169140 32161 CVE-2014-4113 37064  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15904 JVNDB-2014-004779 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys には、権限を取得される脆弱性が存在します。 CVE-2014-4113 71401 CVE-2014-4113 32161 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004779.html 2014-10-14 2014-10-17 View