CVE-2013-3887: Infoleak

Published Nov 13, 2013

Updated

The Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows local users to obtain sensitive information from kernel memory by leveraging improper copy operations, aka "Ancillary Function Driver Information Disclosure Vulnerability."

Affected Software

9 affected components

Microsoft Windows 7=sp1

Microsoft Windows 8

Microsoft Windows Server 2003=sp2

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2012

Microsoft Windows Vista=sp2

Microsoft Windows XP=sp2

Microsoft Windows Vista=sp2

Event History

Nov 13, 2013

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3887?

CVE-2013-3887 is rated as Important, indicating a significant risk of sensitive information exposure.

How do I fix CVE-2013-3887?

To fix CVE-2013-3887, install the Microsoft security updates released in MS13-093 for the affected Windows versions.

What versions of Windows are affected by CVE-2013-3887?

CVE-2013-3887 affects Windows XP SP2, Windows Vista SP2, Windows 7 SP1, Windows 8, Windows Server 2003 SP2, Windows Server 2008 SP2, and Windows Server 2012.

What type of vulnerability is CVE-2013-3887?

CVE-2013-3887 is a local information disclosure vulnerability due to improper handling of kernel memory.

Can CVE-2013-3887 be exploited remotely?

CVE-2013-3887 cannot be exploited remotely, as it requires local user access to the affected systems.