deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-1858
Published: 2013-04-05
Description: The clone system-call implementation in the Linux kernel before 3.8.3 does not properly handle a combination of the CLONE_NEWUSER and CLONE_FS flags, which allows local users to gain privileges by calling chroot and leveraging the sharing of the / directory between a parent process and a child process.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e66eded8309ebf679d3d3c1f5820d1f2ca332c71; http://stealth.openwall.net/xSports/clown-newuser.c; http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.8.3
CVE: CVE-2012-0706
Published: 2013-04-07
Description: IBM Scale Out Network Attached Storage (SONAS) 1.3 before 1.3.2.3 requires cleartext storage of LDAP credentials without recommending a less privileged LDAP account, which might allow attackers to obtain sensitive server information by leveraging root access to a client machine.
CVSS Score: 3.5 (LOW)
CWE: CWE-255, CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004292; https://exchange.xforce.ibmcloud.com/vulnerabilities/73309; http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004292
CVE: CVE-2013-2770
Published: 2013-04-07
Description: The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server (OES) on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://www.novell.com/support/kb/doc.php?id=7011965; http://www.novell.com/support/kb/doc.php?id=7011965
CVE: CVE-2013-0109
Published: 2013-04-08
Description: The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does not properly handle exceptions, which allows local users to gain privileges or cause a denial of service (memory overwrite) via a crafted application.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.kb.cert.org/vuls/id/957036; http://www.nvidia.com/object/product-security.html; http://www.kb.cert.org/vuls/id/957036
CVE: CVE-2013-0110
Published: 2013-04-08
Description: nvSCPAPISvr.exe in the NVIDIA Stereoscopic 3D Driver service, as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.
CVSS Score: 6.8 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/957036; http://www.nvidia.com/object/product-security.html; http://www.kb.cert.org/vuls/id/957036
CVE: CVE-2013-0111
Published: 2013-04-08
Description: daemonu.exe (aka the NVIDIA Update Service Daemon), as distributed with the NVIDIA driver before 307.78, and Release 310 before 311.00, on Windows, lacks " (double quote) characters in the service path, which allows local users to gain privileges via a Trojan horse program.
CVSS Score: 6.8 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/957036; http://www.nvidia.com/object/product-security.html; http://www.kb.cert.org/vuls/id/957036
CVE: CVE-2013-0131
Published: 2013-04-08
Description: Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://nvidia.custhelp.com/app/answers/detail/a_id/3290; http://security.gentoo.org/glsa/glsa-201304-01.xml; http://www.kb.cert.org/vuls/id/771620
CVE: CVE-2013-1776
Published: 2013-04-08
Description: sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839; http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://lists.opensuse.org/opensuse-updates/2013-03/msg00066.html
CVE: CVE-2013-2776
Published: 2013-04-08
Description: sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839; http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://rhn.redhat.com/errata/RHSA-2013-1353.html
CVE: CVE-2013-2777
Published: 2013-04-08
Description: sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling terminal device and connecting to the standard input, output, and error file descriptors of another terminal.  NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701839; http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html; http://rhn.redhat.com/errata/RHSA-2013-1701.html
CVE: CVE-2013-0134
Published: 2013-04-09
Description: Cross-site scripting (XSS) vulnerability in the web interface in AirDroid allows remote attackers to inject arbitrary web script or HTML via a crafted text message that is transmitted by a managed phone.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.kb.cert.org/vuls/id/557252; http://www.kb.cert.org/vuls/id/557252
CVE: CVE-2013-0135
Published: 2013-04-09
Description: Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) addressbook/register/delete_user.php, (2) addressbook/register/edit_user.php, or (3) addressbook/register/edit_user_save.php; the email parameter to (4) addressbook/register/edit_user_save.php, (5) addressbook/register/reset_password.php, (6) addressbook/register/reset_password_save.php, or (7) addressbook/register/user_add_save.php; the username parameter to (8) addressbook/register/checklogin.php or (9) addressbook/register/reset_password_save.php; the (10) lastname, (11) firstname, (12) phone, (13) permissions, or (14) notes parameter to addressbook/register/edit_user_save.php; the (15) q parameter to addressbook/register/admin_index.php; the (16) site parameter to addressbook/register/linktick.php; the (17) password parameter to addressbook/register/reset_password.php; the (18) password_hint parameter to addressbook/register/reset_password_save.php; the (19) var parameter to addressbook/register/traffic.php; or a (20) BasicLogin cookie to addressbook/register/router.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/129789/PHP-Address-Book-Cross-Site-Scripting-SQL-Injection.html; http://www.acadion.nl/labs/advisory/20130203-phpaddressbook.html; http://www.kb.cert.org/vuls/id/183692
CVE: CVE-2013-2778
Published: 2013-04-09
Description: Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests that delete accounts, a different vulnerability than CVE-2013-0135.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-352
References: http://www.acadion.nl/labs/advisory/20130203-phpaddressbook.html; http://www.acadion.nl/labs/advisory/20130203-phpaddressbook.html
CVE: CVE-2012-5635
Published: 2013-04-09
Description: The GlusterFS functionality in Red Hat Storage Management Console 2.0, Native Client, and Server 2.0 allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by (1) tests/volume.rc, (2) extras/hook-scripts/S30samba-stop.sh, and possibly other vectors, different vulnerabilities than CVE-2012-4417.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2013-0691.html; https://bugzilla.redhat.com/show_bug.cgi?id=886364; http://rhn.redhat.com/errata/RHSA-2013-0691.html
CVE: CVE-2012-6097
Published: 2013-04-09
Description: File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.mandriva.com/security/advisories?name=MDVSA-2013:033; https://bugs.mageia.org/show_bug.cgi?id=8652; https://bugzilla.novell.com/show_bug.cgi?id=786096
CVE: CVE-2012-6134
Published: 2013-04-09
Description: Cross-site request forgery (CSRF) vulnerability in the omniauth-oauth2 gem 1.1.1 and earlier for Ruby allows remote attackers to hijack the authentication of users for requests that modify session state.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://rubysec.github.io/advisories/CVE-2012-6134/; http://seclists.org/oss-sec/2013/q1/304; https://gist.github.com/homakov/3673012
CVE: CVE-2013-0253
Published: 2013-04-09
Description: The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-16
References: http://rhn.redhat.com/errata/RHSA-2013-0700.html; https://bugzilla.redhat.com/show_bug.cgi?id=917084; https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E
CVE: CVE-2013-0284
Published: 2013-04-09
Description: Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obtain sensitive information (database credentials and SQL statements) by sniffing the network and deserializing the data.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/oss-sec/2013/q1/304; https://newrelic.com/docs/ruby/ruby-agent-security-notification; http://seclists.org/oss-sec/2013/q1/304
CVE: CVE-2013-0285
Published: 2013-04-09
Description: The nori gem 2.0.x before 2.0.2, 1.1.x before 1.1.4, and 1.0.x before 1.0.3 for Ruby does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://seclists.org/oss-sec/2013/q1/304; https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately; http://seclists.org/oss-sec/2013/q1/304
CVE: CVE-2013-1788
Published: 2013-04-09
Description: poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=0388837f01bc467045164f9ddaff787000a8caaa; http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=8b6dc55e530b2f5ede6b9dfb64aafdd1d5836492; http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=957aa252912cde85d76c41e9710b33425a82b696
CVE: CVE-2013-1789
Published: 2013-04-09
Description: splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.
CVSS Score: 4.3 (MEDIUM)
References: http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a205e71a2dbe0c8d4f4905a76a3f79ec522eacec; http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=a9b8ab4657dec65b8b86c225d12c533ad7e984e2; http://j00ru.vexillium.org/?p=1507
CVE: CVE-2013-1790
Published: 2013-04-09
Description: poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://cgit.freedesktop.org/poppler/poppler/commit/?h=poppler-0.22&id=b1026b5978c385328f2a15a2185c599a563edf91; http://j00ru.vexillium.org/?p=1507; http://lists.fedoraproject.org/pipermail/package-announce/2013-March/100081.html
CVE: CVE-2013-1800
Published: 2013-04-09
Description: The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00003.html; http://secunia.com/advisories/52897; https://bugzilla.novell.com/show_bug.cgi?id=804721
CVE: CVE-2013-1801
Published: 2013-04-09
Description: The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/58260; https://bugzilla.redhat.com/show_bug.cgi?id=917229; https://github.com/jnunemaker/httparty/commit/53a812426dd32108d6cba4272b493aa03bc8c031
CVE: CVE-2013-1802
Published: 2013-04-09
Description: The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00002.html; https://bugzilla.redhat.com/show_bug.cgi?id=917233; https://github.com/datamapper/extlib/compare/b4f98174ec35ac96f76a08d5624fad05d22879b5...4540e7102b803624cc2eade4bb8aaaa934fc31c5
CVE: CVE-2013-1898
Published: 2013-04-09
Description: lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/91839; http://seclists.org/fulldisclosure/2013/Mar/218; http://vapid.dhs.org/advisories/thumbshooter-ruby-gem-remoteexec.html
CVE: CVE-2013-1821
Published: 2013-04-09
Description: lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702525; http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00015.html
CVE: CVE-2013-0078
Published: 2013-04-09
Description: The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-034; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16293
CVE: CVE-2013-1282
Published: 2013-04-09
Description: The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), and Active Directory Services allows remote attackers to cause a denial of service (memory consumption and service outage) via a crafted query, aka "Memory Consumption Vulnerability."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-032; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16463
CVE: CVE-2013-1283
Published: 2013-04-09
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-036; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16563
CVE: CVE-2013-1284
Published: 2013-04-09
Description: Race condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-031; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16455
CVE: CVE-2013-1289
Published: 2013-04-09
Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-035; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16599
CVE: CVE-2013-1290
Published: 2013-04-09
Description: Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka "Incorrect Access Rights Information Disclosure Vulnerability."
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-030; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15758
CVE: CVE-2013-1291
Published: 2013-04-09
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 Gold and SP1, and Windows 8 allows local users to cause a denial of service (reboot) via a crafted OpenType font, aka "OpenType Font Parsing Vulnerability" or "Win32k Font Parsing Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-036; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16504; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-036
CVE: CVE-2013-1292
Published: 2013-04-09
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Race Condition Vulnerability."
CVSS Score: 7.4 (HIGH)
CWE: CWE-362, CWE-362
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-036; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16575
CVE: CVE-2013-1293
Published: 2013-04-09
Description: The NTFS kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a crafted application that leverages improper handling of objects in memory, aka "NTFS NULL Pointer Dereference Vulnerability."
CVSS Score: 6.9 (MEDIUM)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-036; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16485; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-036
CVE: CVE-2013-1294
Published: 2013-04-09
Description: Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Kernel Race Condition Vulnerability."
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-031; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16257
CVE: CVE-2013-1295
Published: 2013-04-09
Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "CSRSS Memory Corruption Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/ncas/alerts/TA13-100A; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-033; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16260