Microsoft · Win32k
CVE-2013-3660
Microsoft Win32k Privilege Escalation Vulnerability
O que é
The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."
CISA: The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft does not properly initialize a pointer for the next object in a certain list, which allows local users to gain privileges.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 18 de abril de 2022
- Adicionada à lista da CISA
- 28 de março de 2022
- Publicada
- 24 de maio de 2013
- Gravidade
- Alto 7,8 CVSS 3.1
- Chance de ataques nos próximos 30 dias (EPSS)
- 39% entre os 1,4% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-119
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (14)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053
- http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0094.html
- http://www.exploit-db.com/exploits/25611/
- http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0090.html
- http://secunia.com/advisories/53435
- http://www.osvdb.org/93539
- http://twitter.com/taviso/statuses/309157606247768064
- http://www.computerworld.com/s/article/9239477
- http://www.theverge.com/2013/5/23/4358400/google-engineer-bashes-microsoft-discloses-windows-flaw
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17360
- http://www.reddit.com/r/netsec/comments/1eqh66/0day_windows_kernel_epathobj_vulnerability/
- http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0006.html
- http://www.us-cert.gov/ncas/alerts/TA13-190A
- http://twitter.com/taviso/statuses/335557286657400832
Mais falhas exploradas de Microsoft
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 22 de jun. de 2023 | Privilege Escalation | Win32k | Alto 7,8 | 14% |
| 9 de mai. de 2023 | Privilege Escalation | Win32k | Alto 7,8 | 41% |
| 25 de mai. de 2022 | Privilege Escalation | Win32k | Alto 8,8 | 15% |
| 23 de mai. de 2022 | Privilege Escalation | Win32k | Alto 7,8 | 3,0% |
| 4 de mai. de 2022 | Privilege Escalation | Win32k | Alto 7,8 | 87% |
| 25 de abr. de 2022 | Privilege Escalation | Win32k | Alto 7,8 | 1,6% |
| 25 de abr. de 2022 | Privilege Escalation | Win32k | Alto 7,8 | 1,6% |
| 15 de mar. de 2022 | Memory Corruption | Win32k | Alto 8,2 | 10% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.