CVE-2013-1300: High severity Microsoft Windows 7 vulnerability

Published Jul 10, 2013

Updated

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Allocation Vulnerability."

Affected Software

14 affected components

Microsoft Windows 7=sp1

Microsoft Windows 8

Microsoft Windows RT

Microsoft Windows Server 2003=sp2

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2012

Microsoft Windows Vista=sp2

Microsoft Windows XP=sp3

Microsoft Windows XP=sp2

Microsoft Windows Vista=sp2

Event History

Jul 10, 2013

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1300?

CVE-2013-1300 is rated as critical due to its potential to allow local users to gain elevated privileges.

How do I fix CVE-2013-1300?

You can fix CVE-2013-1300 by applying the appropriate Microsoft security update for your affected Windows version.

What versions of Windows are affected by CVE-2013-1300?

CVE-2013-1300 affects Microsoft Windows XP, Vista, 7, 8, Server 2003, Server 2008, Server 2012, and Windows RT.

What type of vulnerability is CVE-2013-1300?

CVE-2013-1300 is a privilege escalation vulnerability in the win32k.sys component of Windows.

Can CVE-2013-1300 be exploited remotely?

CVE-2013-1300 requires local access to be exploited, making it a local privilege escalation vulnerability.