Oval Definition:oval:org.mitre.oval:def:20951
Revision Date:2014-01-27Version:44
Title:Win32k Memory Corruption Vulnerability (CVE-2013-3899) - MS13-101
Description:win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-3899
Platform(s):Microsoft Windows Server 2003
Microsoft Windows XP
Product(s):
Definition Synopsis
  • xp sp3/version
  • Microsoft Windows XP (x86) SP3 is installed
  • AND Check if the version of win32k.sys is less than 5.1.2600.6473
  • OR win xp/server 2003/versions
  • xp/server 2003
  • Microsoft Windows XP x64 Edition SP2 is installed
  • OR Microsoft Windows Server 2003 (ia64) SP2 is installed
  • OR Microsoft Windows Server 2003 SP2 (x86) is installed
  • OR Microsoft Windows Server 2003 SP2 (x64) is installed
  • AND Check if the version of win32k.sys is less than 5.2.3790.5250
    • BACK