Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2013-3903

Overview

Vulnerability Score 4.7 4.7
CVE Id CVE-2013-3903
Last Modified 11 Dec 2013 11:13:24
Published 10 Dec 2013 07:55:03
Confidentiality Impact NONE NONE
Integrity Impact NONE NONE
Availability Impact COMPLETE COMPLETE
Access Vector LOCAL
Access Complexity MEDIUM
Authentication NONE

CVE-2013-3903

Summary

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service (reboot) via a crafted TrueType font (TTF) file, aka "TrueType Font Parsing Vulnerability."

Vulnerable Systems

Operating System

  • Microsoft Windows 8 -

  • Microsoft Windows Rt -

  • Microsoft Windows Rt 8.1 -

  • Microsoft Windows Server 2012 -

  • Microsoft Windows Server 2012 R2


References

MS - MS13-101

Related Patches

MS13-101 Security Update for Windows Server 2003 (KB2893984)

MS13-101 Security Update for Windows Server 2008 (KB2887069)

MS13-101 Security Update for Windows Server 2008 (KB2893984)

MS13-101 Security Update for Windows XP (KB2893984)

MS13-101 Security Update for Windows Vista (KB2893984)

MS13-101 Security Update for Windows Vista (KB2887069)

MS13-101 Security Update for Windows Server 2003 x64 (KB2893984)

MS13-101 Security Update for Windows Server 2008 x64 (KB2893984)

MS13-101 Security Update for Windows Server 2008 x64 (KB2887069)

MS13-101 Security Update for Windows Vista x64 (KB2893984)

MS13-101 Security Update for Windows Vista x64 (KB2887069)


Last Updated: 27 May 2016 11:03:54