CVE-2013-3661: Path Traversal
The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing the same list member, which allows local users to cause a denial of service (infinite traversal) via vectors that trigger a crafted PATHRECORD chain.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3661?
CVE-2013-3661 is considered as a critical vulnerability that could allow an attacker to execute arbitrary code on affected systems.
How do I fix CVE-2013-3661?
To fix CVE-2013-3661, ensure that your system is updated with the latest security patches provided by Microsoft.
Which versions of Windows are affected by CVE-2013-3661?
CVE-2013-3661 affects multiple versions of Windows including XP, Vista, 7, 8, Server 2003, Server 2008, and Server 2012.
What type of vulnerability is CVE-2013-3661?
CVE-2013-3661 is a memory corruption vulnerability that arises from improper handling of linked-list traversal.
Can CVE-2013-3661 be exploited remotely?
Yes, CVE-2013-3661 can potentially be exploited remotely by an attacker through a specially crafted application or document.