CVE-2013-3167: High severity Microsoft Windows 7 vulnerability
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Information Disclosure Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3167?
CVE-2013-3167 is rated as important, indicating that it poses a significant risk to affected systems.
How do I fix CVE-2013-3167?
To fix CVE-2013-3167, apply the security update provided by Microsoft for affected versions of Windows.
What versions of Windows are affected by CVE-2013-3167?
CVE-2013-3167 affects multiple versions including Windows XP SP2/SP3, Vista SP2, Windows 7 SP1, and Windows Server 2003/2008 SP2.
What type of attack does CVE-2013-3167 enable?
CVE-2013-3167 allows local users to gain elevated privileges on the system through crafted applications.
Is there a workaround for CVE-2013-3167?
No official workarounds are recommended for CVE-2013-3167 besides applying the available software updates.