Security Lab

Повышение привилегий в Microsoft Windows

Дата публикации:08.10.2013
Дата изменения:12.02.2014
Всего просмотров:5089
Опасность:
Низкая
Наличие исправления: Да
Количество уязвимостей:1
CVSSv2 рейтинг: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:O/RC:C)
CVE ID: CVE-2013-3881
Вектор эксплуатации: Локальная
Воздействие: Повышение привилегий
CWE ID: Нет данных
Наличие эксплоита: Нет данных
Уязвимые продукты: Microsoft Windows 7
Microsoft Windows Server 2008
Уязвимые версии:
Microsoft Windows 7
Microsoft Windows Server 2008

Описание:
Уязвимости позволяют пользователю выполнить произвольный код на системе.

Уязвимость существует из-за ошибки работы драйвера режима ядра. Злоумышленник может с повысить привилегии на целевой системе.

URL производителя: http://www.microsoft.com/

Решение: Для устранения уязвимости установите исправление с сайта производителя.

a:2:{s:4:"TEXT";s:22051:"
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 
(2847311)
Windows Server 2008 for 32-bit Systems Service Pack 2 
(2855844)
Windows Server 2008 for 32-bit Systems Service Pack 2 
(2862330)
Windows Server 2008 for 32-bit Systems Service Pack 2
(2862335)
Windows Server 2008 for 32-bit Systems Service Pack 2 
(2864202)
Windows Server 2008 for 32-bit Systems Service Pack 2 
(2868038)
Windows Server 2008 for 32-bit Systems Service Pack 2 
(2876284)
Windows Server 2008 for 32-bit Systems Service Pack 2
(2883150)
Windows Server 2008 for 32-bit Systems Service Pack 2 
(2884256)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 
(2847311)
Windows Server 2008 for x64-based Systems Service Pack 2 
(2855844)
Windows Server 2008 for x64-based Systems Service Pack 2 
(2862330)
Windows Server 2008 for x64-based Systems Service Pack 2 
(2862335)
Windows Server 2008 for x64-based Systems Service Pack 2 
(2864202)
Windows Server 2008 for x64-based Systems Service Pack 2 
(2868038)
Windows Server 2008 for x64-based Systems Service Pack 2 
(2876284)
Windows Server 2008 for x64-based Systems Service Pack 2
(2883150)
Windows Server 2008 for x64-based Systems Service Pack 2 
(2884256)
Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems Service Pack 2 
(2847311)
Windows Server 2008 for Itanium-based Systems Service Pack 2
(2862330)
Windows Server 2008 for Itanium-based Systems Service Pack 2
(2862335)
Windows Server 2008 for Itanium-based Systems Service Pack 2
(2864202)
Windows Server 2008 for Itanium-based Systems Service Pack 2
(2868038)
Windows Server 2008 for Itanium-based Systems Service Pack 2
(2876284)
Windows Server 2008 for Itanium-based Systems Service Pack 2
(2883150)
Windows Server 2008 for Itanium-based Systems Service Pack 2
(2884256)
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1 
(2847311)
Windows 7 for 32-bit Systems Service Pack 1 
(2855844)
Windows 7 for 32-bit Systems Service Pack 1 
(2862330)
Windows 7 for 32-bit Systems Service Pack 1 
(2862335)
Windows 7 for 32-bit Systems Service Pack 1 
(2864202)
Windows 7 for 32-bit Systems Service Pack 1 
(2868038)
Windows 7 for 32-bit Systems Service Pack 1 
(2876284)
Windows 7 for 32-bit Systems Service Pack 1 
(2883150)
Windows 7 for 32-bit Systems Service Pack 1 
(2884256)
Windows 7 for x64-based Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1 
(2847311)
Windows 7 for x64-based Systems Service Pack 1 
(2855844)
Windows 7 for x64-based Systems Service Pack 1 
(2862330)
Windows 7 for x64-based Systems Service Pack 1 
(2862335)
Windows 7 for x64-based Systems Service Pack 1 
(2864202)
Windows 7 for x64-based Systems Service Pack 1 
(2868038)
Windows 7 for x64-based Systems Service Pack 1 
(2876284)
Windows 7 for x64-based Systems Service Pack 1 
(2883150)
Windows 7 for x64-based Systems Service Pack 1 
(2884256)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 
(2847311)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2855844)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2862330)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2862335)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2864202)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2868038)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2876284)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2883150)
Windows Server 2008 R2 for x64-based Systems Service Pack 1
(2884256)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2847311)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2855844)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2862330)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2862335)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2864202)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2868038)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2876284)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2883150)
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
(2884256)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(2847311)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(2862330)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(2862335)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(2864202)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(2876284)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(2883150)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(2847311)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(2862330)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(2862335)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(2864202)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(2876284)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(2883150)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(2847311)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(2862330)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(2862335)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(2864202)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(2876284)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(2883150)
Windows Server 2012 (Server Core installation)
Windows Server 2012 (Server Core installation)
(2847311)
Windows Server 2012 (Server Core installation)
(2862330)
Windows Server 2012 (Server Core installation)
(2862335)
Windows Server 2012 (Server Core installation)
(2863725)
Windows Server 2012 (Server Core installation)
(2864202)
Windows Server 2012 (Server Core installation)
(2883150)
";s:4:"TYPE";s:4:"html";}
Эксплоит: Windows TrackPopupMenuEx Win32k NULL Page Exploit

https://technet.microsoft.com/en-us/security/bulletin/ms13-081
Журнал изменений: a:2:{s:4:"TEXT";s:70:"09.10.2013 - незначительные изменения. 12.02.2014 - Добавлен РоС-код.";s:4:"TYPE";s:4:"html";}