CVE-2013-1286 in Windows
Zusammenfassung (Englisch)
The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1287.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
12.01.2013
Veröffentlichung
12.03.2013
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 7973 | Microsoft Windows USB Driver/Memory Object erweiterte Rechte | 264 | Nicht definiert | Offizieller Fix | CVE-2013-1286 |