Microsoft Windows CSRSS CVE-2013-0076 Local Privilege Escalation Vulnerability

Bugtraq ID:	57821
Class:	Unknown
CVE:	CVE-2013-0076
Remote:	No
Local:	Yes
Published:	Feb 12 2013 12:00AM
Updated:	Apr 02 2013 10:37AM
Credit:	Max DeLiso
Vulnerable:	Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 Itanium 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 for x64-based Systems 0 Microsoft Windows Server 2003 R2 X64-Standard Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for x64-based Systems 0 Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for 32-bit Systems 0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0
Not Vulnerable:

Microsoft Windows CSRSS CVE-2013-0076 Local Privilege Escalation Vulnerability

Microsoft Windows is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

Microsoft Windows CSRSS CVE-2013-0076 Local Privilege Escalation Vulnerability

A commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Windows CSRSS CVE-2013-0076 Local Privilege Escalation Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

Microsoft Windows CSRSS CVE-2013-0076 Local Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)