CVE-2013-5065

Sažetak

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.

Reference

http://technet.microsoft.com/security/advisory/2914486
http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-002
https://www.exploit-db.com/exploits/37732/
http://technet.microsoft.com/security/advisory/2914486
http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-002
https://www.exploit-db.com/exploits/37732/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-5065

CVSS

Base:	7.2
Impact:	10.0
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:L/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

21-04-2026 - 15:20

Objavljeno

28-11-2013 - 00:55