Test ID:	1.3.6.1.4.1.25623.1.0.902978
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2850851)
Summary:	This host is missing a critical security update according to; Microsoft Bulletin MS13-053.
Description:	Summary: This host is missing a critical security update according to Microsoft Bulletin MS13-053. Vulnerability Insight: Multiple flaws are due to: - Unspecified errors within the Windows kernel-mode driver (win32k.sys) when processing certain objects and can be exploited to cause a crash or execute arbitrary code with the kernel privilege. - An error exists within the GDI+ subsystem. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a buffer overflow and execute arbitrary code with kernel privileges. Affected Software/OS: - Microsoft Windows 8 - Microsoft Windows Server 2012 - Microsoft Windows XP x32 Edition Service Pack 3 and prior - Microsoft Windows XP x64 Edition Service Pack 2 and prior - Microsoft Windows 7 x32/x64 Edition Service Pack 1 and prior - Microsoft Windows 2003 x32/x64 Edition Service Pack 2 and prior - Microsoft Windows Vista x32/x64 Edition Service Pack 2 and prior - Microsoft Windows Server 2008 R2 x64 Edition Service Pack 1 and prior - Microsoft Windows Server 2008 x32/x64 Edition Service Pack 2 and prior Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1300 Cert/CC Advisory: TA13-190A http://www.us-cert.gov/ncas/alerts/TA13-190A http://www.exploit-db.com/exploits/33213 Microsoft Security Bulletin: MS13-053 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-053 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17353 Common Vulnerability Exposure (CVE) ID: CVE-2013-1340 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17273 Common Vulnerability Exposure (CVE) ID: CVE-2013-1345 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17379 Common Vulnerability Exposure (CVE) ID: CVE-2013-3129 Microsoft Security Bulletin: MS13-052 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-052 Microsoft Security Bulletin: MS13-054 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-054 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17323 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17341 Common Vulnerability Exposure (CVE) ID: CVE-2013-3167 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17293 Common Vulnerability Exposure (CVE) ID: CVE-2013-3172 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17188 Common Vulnerability Exposure (CVE) ID: CVE-2013-3173 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17148 Common Vulnerability Exposure (CVE) ID: CVE-2013-3660 http://www.exploit-db.com/exploits/25611/ http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0094.html http://archives.neohapsis.com/archives/fulldisclosure/2013-05/0090.html http://archives.neohapsis.com/archives/fulldisclosure/2013-06/0006.html http://twitter.com/taviso/statuses/309157606247768064 http://twitter.com/taviso/statuses/335557286657400832 http://www.computerworld.com/s/article/9239477 http://www.reddit.com/r/netsec/comments/1eqh66/0day_windows_kernel_epathobj_vulnerability/ http://www.theverge.com/2013/5/23/4358400/google-engineer-bashes-microsoft-discloses-windows-flaw http://www.osvdb.org/93539 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17360 http://secunia.com/advisories/53435
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.