ID CVE-2013-3881
Summary win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*
CVSS
Base: 7.2 (as of 28-09-2020 - 12:58)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
msbulletin via4
bulletin_id MS13-081
bulletin_url
date 2013-10-08T00:00:00
impact Remote Code Execution
knowledgebase_id 2870008
knowledgebase_url
severity Critical
title Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution
oval via4
accepted 2013-11-25T04:00:25.102-05:00
class vulnerability
contributors
name SecPod Team
organization SecPod Technologies
definition_extensions
  • comment Microsoft Windows 7 (32-bit) Service Pack 1 is installed
    oval oval:org.mitre.oval:def:12292
  • comment Microsoft Windows 7 x64 Service Pack 1 is installed
    oval oval:org.mitre.oval:def:12627
  • comment Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed
    oval oval:org.mitre.oval:def:12567
  • comment Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed
    oval oval:org.mitre.oval:def:12583
description win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability."
family windows
id oval:org.mitre.oval:def:18614
status accepted
submitted 2013-10-15T15:40:52
title Win32k NULL Page Vulnerability (CVE-2013-3881) - MS13-081
version 76
refmap via4
cert TA13-288A
Last major update 28-09-2020 - 12:58
Published 09-10-2013 - 14:53
Last modified 28-09-2020 - 12:58
Back to Top