Memory Corruption Vulnerability in Windows XP and Server 2003 by Microsoft
CVE-2013-3899

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Xp
Windows Server 2003
Vendor
CVE Published:
11 December 2013

Summary

The memory corruption issue in win32k.sys, part of the kernel-mode drivers, affects Microsoft Windows XP and Windows Server 2003. It does not adequately validate memory addresses, leading to risks where local users can execute crafted applications to escalate their privileges. This vulnerability poses a significant threat, allowing unauthorized access and modifications to system functionalities. Organizations running these operating systems must apply the necessary patches to safeguard against potential exploits.

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.