CVE-2013-0008

EPSS 17.1%

win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka "Win32k Improper Message Handling Vulnerability."

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/24485unverified exploitdbwww.exploit-db.com/exploits/24485unverified exploitdbwww.exploit-db.com/exploits/27296unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-005 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16326 http://www.exploit-db.com/exploits/24485 http://www.securityfocus.com/bid/57135 http://www.us-cert.gov/cas/techalerts/TA13-008A.html