Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3661 Local Denial Of Service Vulnerability

Bugtraq ID:	60159
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3661
Remote:	No
Local:	Yes
Published:	May 17 2013 12:00AM
Updated:	May 17 2013 12:00AM
Credit:	Tavis Ormandy
Vulnerable:	Microsoft Windows XP Professional SP3 Microsoft Windows XP Professional SP2 Microsoft Windows XP Media Center Edition SP3 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Home SP3 Microsoft Windows XP Home SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 Enterprise Edition SP2 Microsoft Windows Server 2008 Datacenter Edition SP2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows Server 2003 SP2 Microsoft Windows 8 0 Microsoft Windows 7 Professional 0 Microsoft Windows 7 for 32-bit Systems SP1
Not Vulnerable:

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3661 Local Denial Of Service Vulnerability

Microsoft Windows is prone to a local denial-of-service vulnerability due to an error in the 'Win32k.sys' file.

A local attacker can exploit this issue to crash the Windows kernel, denying service to legitimate users.

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3661 Local Denial Of Service Vulnerability

An attacker needs local interactive access to exploit this issue.

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3661 Local Denial Of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3661 Local Denial Of Service Vulnerability

References:

• Microsoft Windows Homepage (Microsoft )