CVE-2013-5058

Description

Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows local users to gain privileges via a crafted application, aka "Win32k Integer Overflow Vulnerability."

Related CPE's

omicrosoftwindows_xp-sp3******

omicrosoftwindows_server_2008r2sp1****x64*

omicrosoftwindows_server_2012r2*******

omicrosoftwindows_rt-*******

omicrosoftwindows_server_2008r2sp1****itanium*

omicrosoftwindows_8.1-*******

omicrosoftwindows_server_2008-sp2******

omicrosoftwindows_7-sp1******

omicrosoftwindows_rt_8.1-*******

omicrosoftwindows_vista-sp2******

References

MS13-101

PatchVendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Version

2.0

VectorString

AV:L/AC:M/Au:N/C:C/I:C/A:C

AccessVector

LOCAL

AccessComplexity

MEDIUM

Authentication

NONE

ConfidentialityImpact

COMPLETE

IntegrityImpact

COMPLETE

AvailabilityImpact

COMPLETE

BaseScore

6.900000095367432

Created by Yello
About Severity.io