NVD

Id
39418  
Name
CVE-2013-3661  
Description
The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-05-24  
Modified Date
2013-06-05  
Seq
2013-3661  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
200990 39418 CVE-2013-3661 20130517 Re: exploitation ideas under memory pressure  View
200991 39418 CVE-2013-3661 20130603 Re: exploitation ideas under memory pressure  View
200992 39418 CVE-2013-3661 http://twitter.com/taviso/statuses/335557286657400832  View
200993 39418 CVE-2013-3661 http://www.computerworld.com/s/article/9239477  View
200994 39418 CVE-2013-3661 25611  View
200995 39418 CVE-2013-3661 http://www.reddit.com/r/netsec/comments/1eqh66/0day_windows_kernel_epathobj_vulnerability/  View
200996 39418 CVE-2013-3661 http://www.theverge.com/2013/5/23/4358400/google-engineer-bashes-microsoft-discloses-windows-flaw  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21265 JVNDB-2013-002840 Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数は、リンクされたリスト (linked-list) のトラバーサルが継続して同じリストのメンバにアクセスしているかどうかをチェックしないため、サービス運用妨害 (無限トラバーサル) 状態にされる脆弱性が存在します。 CVE-2013-3661 63603 CVE-2013-3661 39418 4.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002840.html 2013-05-17 2013-05-29 View