NVD

Id
39003  
Name
CVE-2013-3154  
Description
The signature-update functionality in Windows Defender on Microsoft Windows 7 and Windows Server 2008 R2 relies on an incorrect pathname, which allows local users to gain privileges via a Trojan horse application in the %SYSTEMDRIVE% top-level directory, aka "Microsoft Windows 7 Defender Improper Pathname Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-09  
Modified Date
2016-10-19  
Seq
2013-3154  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199736 39003 CVE-2013-3154 http://blogs.technet.com/b/srd/archive/2013/07/09/assessing-risk-for-the-july-2013-security-updates.aspx  View
199737 39003 CVE-2013-3154 oval:org.mitre.oval:def:17253  View
199738 39003 CVE-2013-3154 MS13-058  View
199739 39003 CVE-2013-3154 TA13-190A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21711 JVNDB-2013-003286 Microsoft Windows 7 および Windows Server 2008 R2 の Windows Defender の署名更新機能における権限昇格の脆弱性 Microsoft Windows 7 および Windows Server 2008 R2 上で稼働する Windows Defender の署名更新 (signature-update) 機能は、誤ったパス名を信頼するため、権限を取得される脆弱性が存在します。 CVE-2013-3154 63096 CVE-2013-3154 39003 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003286.html 2013-07-09 2013-07-24 View