NetSight
IP …
high7.8Known exploitedPublic exploit code

CVE-2013-3660

Microsoft Win32k Privilege Escalation Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-28. Federal due date: 2022-04-18.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not properly initialize a pointer for the next object in a certain list, which allows local users to obtain write access to the PATHRECORD chain, and consequently gain privileges, by triggering excessive consumption of paged memory and then making many FlattenPath function calls, aka "Win32k Read AV Vulnerability."

Affected products

VendorProductAffected versions
MicrosoftWindows 7
All versions
MicrosoftWindows 8
All versions
MicrosoftWindows Rt
All versions
MicrosoftWindows Server 2003
All versions
MicrosoftWindows Server 2008
All versions
Version r2
MicrosoftWindows Server 2012
All versions
MicrosoftWindows Vista
All versions
MicrosoftWindows Xp
All versions

Weakness classification

CWE-119

References