deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-0022
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer LsGetTrailInfo Use After Free Vulnerability."
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-399, CWE-416
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16069
CVE: CVE-2013-0023
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CDispNode Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16470
CVE: CVE-2013-0024
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer pasteHTML Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16126
CVE: CVE-2013-0025
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer SLayoutRun Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16294
CVE: CVE-2013-0026
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer InsertElement Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16472
CVE: CVE-2013-0027
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CPasteCommand Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16360
CVE: CVE-2013-0028
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CObjectElement Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16249
CVE: CVE-2013-0029
Published: 2013-02-13
Description: Use-after-free vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CHTML Use After Free Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-009; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16245
CVE: CVE-2013-0030
Published: 2013-02-13
Description: The Vector Markup Language (VML) implementation in Microsoft Internet Explorer 6 through 10 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via a crafted web site, aka "VML Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-010; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16175
CVE: CVE-2013-0073
Published: 2013-02-13
Description: The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-015; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16475
CVE: CVE-2013-0075
Published: 2013-02-13
Description: The TCP/IP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (reboot) via a crafted packet that terminates a TCP connection, aka "TCP FIN WAIT Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-018; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16373
CVE: CVE-2013-0076
Published: 2013-02-13
Description: The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Reference Count Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-399
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-019; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16478
CVE: CVE-2013-0077
Published: 2013-02-13
Description: Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a media file, (2) a media stream, or (3) a Microsoft Office document, aka "Media Decompression Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-011; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15873
CVE: CVE-2013-1248
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16431
CVE: CVE-2013-1249
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16320
CVE: CVE-2013-1250
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16142
CVE: CVE-2013-1251
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16408
CVE: CVE-2013-1252
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16480
CVE: CVE-2013-1253
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16122
CVE: CVE-2013-1254
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15524
CVE: CVE-2013-1255
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16501
CVE: CVE-2013-1256
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16436
CVE: CVE-2013-1257
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16176
CVE: CVE-2013-1258
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16474
CVE: CVE-2013-1259
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16344
CVE: CVE-2013-1260
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16301
CVE: CVE-2013-1261
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16284
CVE: CVE-2013-1262
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16244
CVE: CVE-2013-1263
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16342
CVE: CVE-2013-1264
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16379
CVE: CVE-2013-1265
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16510
CVE: CVE-2013-1266
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15999
CVE: CVE-2013-1267
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16412
CVE: CVE-2013-1268
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15967
CVE: CVE-2013-1269
Published: 2013-02-13
Description: Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-362
References: http://www.us-cert.gov/cas/techalerts/TA13-043B.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-016; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16374