Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1213 State: PUBLISHED Published: 2013-05-29T19:00:00Z Last Updated: 2024-09-16T22:35:14.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor Module (VSM), which allows remote attackers to cause a denial of service (false VEM unavailability report) via a flood of UDP packets, aka Bug ID CSCud14840. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1213
CVE ID: CVE-2013-1214 State: PUBLISHED Published: 2013-04-24T10:00:00Z Last Updated: 2024-09-16T20:07:17.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visiting the scripts repository directory, aka Bug ID CSCuf77546. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1214
CVE ID: CVE-2013-1215 State: PUBLISHED Published: 2013-04-25T20:00:00Z Last Updated: 2024-09-16T23:15:54.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID CSCuf85295. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1215
CVE ID: CVE-2013-1216 State: PUBLISHED Published: 2013-04-29T01:00:00Z Last Updated: 2024-09-16T16:57:44.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (memory consumption and process restart) via crafted SNMP packets, aka Bug ID CSCue31546. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1216
CVE ID: CVE-2013-1217 State: PUBLISHED Published: 2013-04-24T10:00:00Z Last Updated: 2024-09-16T22:34:57.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to cause a denial of service (device reload) by sending many SNMP requests at the same time, aka Bug ID CSCub41105. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1217
CVE ID: CVE-2013-1218 State: PUBLISHED Published: 2013-07-18T00:00:00Z Last Updated: 2024-09-17T00:00:39.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips
CVE ID: CVE-2013-1219 State: PUBLISHED Published: 2013-04-29T01:00:00Z Last Updated: 2024-09-16T22:08:21.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial of service (Regex hardware job failure and application hang) via a (1) initiate signature upgrade, (2) initiate global correlation, (3) show statistics anomaly-detection, or (4) clear database action, aka Bug ID CSCuc74630. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1219
CVE ID: CVE-2013-1220 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-17T04:04:50.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CallServer component in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to cause a denial of service (call-acceptance outage) via malformed SIP INVITE messages, aka Bug ID CSCua65148. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
CVE ID: CVE-2013-1221 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-17T03:23:57.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to execute arbitrary code via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38384. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
CVE ID: CVE-2013-1222 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-16T18:13:18.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Tomcat Web Management feature in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly configure Tomcat components, which allows remote attackers to launch arbitrary custom web applications via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38379. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
CVE ID: CVE-2013-1223 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-16T20:52:00.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: The log viewer in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 does not properly validate an unspecified parameter, which allows remote attackers to read arbitrary files via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCub38372. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
CVE ID: CVE-2013-1224 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-16T17:29:08.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Resource Manager in Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to overwrite arbitrary files via a crafted (1) HTTP or (2) HTTPS request that triggers incorrect parameter validation, aka Bug ID CSCub38369. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
CVE ID: CVE-2013-1225 State: PUBLISHED Published: 2013-05-09T10:00:00Z Last Updated: 2024-09-16T19:35:44.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Customer Voice Portal (CVP) Software before 9.0.1 ES 11 allows remote attackers to read arbitrary files via a Resource Manager (1) HTTP or (2) HTTPS request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCub38366. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130508-cvp
CVE ID: CVE-2013-1226 State: PUBLISHED Published: 2013-04-29T01:00:00Z Last Updated: 2024-09-17T00:45:52.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a crafted frame, aka Bug ID CSCug47098. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1226
CVE ID: CVE-2013-1227 State: PUBLISHED Published: 2013-04-29T01:00:00Z Last Updated: 2024-09-17T03:23:01.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCug37902. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1227
CVE ID: CVE-2013-1228 State: PUBLISHED Published: 2013-09-06T10:00:00Z Last Updated: 2024-09-16T22:20:57.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1228
CVE ID: CVE-2013-1229 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-16T20:37:59.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: TMSSNMPService.exe in TelePresence Manager in Cisco TelePresence Management Suite (TMS) on 64-bit platforms allows remote attackers to cause a denial of service (process crash) via SNMP traps, aka Bug ID CSCue00028. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1229
CVE ID: CVE-2013-1230 State: PUBLISHED Published: 2013-05-01T10:00:00Z Last Updated: 2024-09-17T02:32:57.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Domain Manager allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed UDP packets, aka Bug ID CSCug47057. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1230
CVE ID: CVE-2013-1231 State: PUBLISHED Published: 2013-05-03T10:00:00Z Last Updated: 2024-09-16T16:23:47.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted request, aka Bug IDs CSCue36664 and CSCue36629. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1231
CVE ID: CVE-2013-1232 State: PUBLISHED Published: 2013-05-04T01:00:00 Last Updated: 2024-08-06T14:57:04.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP implementation in Cisco WebEx Node for MCS, WebEx Meetings Server, and WebEx Node for ASR 1000 Series allows remote attackers to read the contents of uninitialized memory locations via a crafted request, aka Bug IDs CSCue36672, CSCue31363, CSCuf17466, and CSCug61252. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1232
CVE ID: CVE-2013-1233 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2013-1234 State: PUBLISHED Published: 2013-05-03T10:00:00Z Last Updated: 2024-09-17T02:27:28.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (process restart) via crafted SNMP packets, aka Bug ID CSCue69472. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1234
CVE ID: CVE-2013-1235 State: PUBLISHED Published: 2013-05-04T01:00:00Z Last Updated: 2024-09-17T02:58:04.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Wireless LAN Controller (WLC) devices do not properly address the resource consumption of terminated TELNET sessions, which allows remote attackers to cause a denial of service (TELNET outage) by making many TELNET connections and improperly ending these connections, aka Bug ID CSCug35507. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1235
CVE ID: CVE-2013-1236 State: PUBLISHED Published: 2013-05-16T01:00:00Z Last Updated: 2024-09-16T21:08:19.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence Supervisor MSE 8050 before 2.3(1.31) allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing TCP connections at a high rate, aka Bug IDs CSCuf76076 and CSCuf79763. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130515-mse
CVE ID: CVE-2013-1240 State: PUBLISHED Published: 2013-05-04T01:00:00Z Last Updated: 2024-09-16T17:47:47.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command-line interface in Cisco Unified Communications Manager (CUCM) does not properly validate input, which allows local users to read arbitrary files via unspecified vectors, aka Bug ID CSCue25770. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1240
CVE ID: CVE-2013-1241 State: PUBLISHED Published: 2013-05-08T10:00:00Z Last Updated: 2024-09-16T17:43:29.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service (module reload) via a series of malformed packets, aka Bug ID CSCub92025. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1241
CVE ID: CVE-2013-1242 State: PUBLISHED Published: 2013-05-10T10:00:00Z Last Updated: 2024-09-17T02:48:03.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the web framework in the server in Cisco Unified Presence (CUP) allows remote attackers to cause a denial of service (memory consumption) via malformed TCP packets, aka Bug ID CSCug38080. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1242
CVE ID: CVE-2013-1243 State: PUBLISHED Published: 2013-07-18T00:00:00Z Last Updated: 2024-09-17T00:16:22.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips
CVE ID: CVE-2013-1244 State: PUBLISHED Published: 2013-05-16T01:00:00Z Last Updated: 2024-09-16T17:37:52.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the portal module in Cisco WebEx Social allows remote authenticated users to inject arbitrary web script or HTML via a javascript: URL in the link field in a post, aka Bug ID CSCue67199. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1244
CVE ID: CVE-2013-1245 State: PUBLISHED Published: 2013-05-16T01:00:00Z Last Updated: 2024-09-17T02:17:11.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user-management page in Cisco WebEx Social relies on client-side validation of values in the Screen Name, First Name, Middle Name, Last Name, Email Address, and Job Title fields, which allows remote authenticated users to bypass intended access restrictions via crafted requests, aka Bug ID CSCue67190. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1245
CVE ID: CVE-2013-1246 State: PUBLISHED Published: 2013-05-31T15:00:00Z Last Updated: 2024-09-16T16:22:50.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco TelePresence System Software does not properly handle inactive t-shell sessions, which allows remote authenticated users to cause a denial of service (memory consumption and service outage) by establishing multiple SSH connections, aka Bug ID CSCug77610. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1246
CVE ID: CVE-2013-1247 State: PUBLISHED Published: 2013-05-31T21:00:00Z Last Updated: 2024-09-17T02:32:30.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the wireless configuration module in Cisco Prime Infrastructure allows remote attackers to inject arbitrary web script or HTML via an SSID that is not properly handled during display of the XML windowing table, aka Bug ID CSCuf04356. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1247
CVE ID: CVE-2013-1248 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:57:05.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: References: - https://docs.micr
y than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16431 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html
CVE ID: CVE-2013-1249 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:57:04.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: References: - https://docs.micr
y than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16320
CVE ID: CVE-2013-1250 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:57:04.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybul
onal Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16142 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html
CVE ID: CVE-2013-1251 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:57:04.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybul
onal Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16408 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html
CVE ID: CVE-2013-1252 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2024-08-06T14:57:03.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybul
onal Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16480
CVE ID: CVE-2013-1253 State: PUBLISHED Published: 2013-02-13T11:00:00 Last Updated: 2025-01-16T20:47:51.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/sec
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16122 - http://www.us-cert.gov/cas/techalerts/TA13-043B.html