CVE-2014-0323: Infoleak
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (system hang) via a crafted application, aka "Win32k Information Disclosure Vulnerability."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0323?
CVE-2014-0323 has a severity rating of important, indicating potential exploitation that could compromise the system.
How do I fix CVE-2014-0323?
To fix CVE-2014-0323, you should apply the security updates provided by Microsoft for the affected Windows versions.
Who is affected by CVE-2014-0323?
CVE-2014-0323 affects local users on Microsoft Windows XP, Windows Vista, Windows 7, Windows 8, Windows 8.1, and several Windows Server versions.
What can be exploited in CVE-2014-0323?
CVE-2014-0323 can be exploited to allow local users to obtain sensitive information from the system.
Which Windows versions are vulnerable to CVE-2014-0323?
Vulnerable Windows versions include XP SP2/SP3, Vista SP2, Server 2003 SP2, 7 SP1, 8, 8.1, Server 2012, and their respective R2 and RT editions.