CVE-2013-3899 in Windows
Summary
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
06/03/2013
Disclosure
12/10/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11445 | Microsoft Windows win32k.sys input validation | 20 | Proof-of-Concept | Official fix | CVE-2013-3899 |