SCF Advanced Search


Members
  • Total Members: 13496
  • Latest: Jack K
Stats
  • Total Posts: 35646
  • Total Topics: 10896
  • Online Today: 3463
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)











Post reply

Name:
Email:
Subject:
Message icon:

Verification:
Type the letters shown in the picture
Listen to the letters / Request another image

Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters):www.scforum.info:

shortcuts: hit alt+s to submit/post or alt+p to preview


Topic Summary

Posted by: Pez
« on: 16. December 2013., 12:30:59 »

Windows XP, 2003 Server: Product Coverage and Mitigation for CVE-2013-5065

On November 27th, 2013, Microsoft published Security Advisory 2914486, which coverers a elevation of privilege vulnerability in certain versions of Windows XP and Windows Server 2003.

The flaw lies in the NDProxy component of the windows kernel.  Note, exploitation requires that an attacker holds local login credentials.

This threat is currently being exploited in limited and targeted attacks.  Functional exploitation and malware artifacts have been identified in the wild.

 
Remediation / Mitigation

Microsoft
Microsoft has provided a workaround to address this issue. Details are available at:

http://technet.microsoft.com/en-us/security/advisory/2914486
 

McAfee Labs
The following McAfee products / content provide coverage

McAfee Vulnerability Manager
 McAfee MVM / FSL Content Release of 11/28/2013
McAfee Antivirus
 Coverage is provided in the 7276 DATs, released on 12/1/2013
 Name – Exploit-CVE2013-5065

 
Further reading:
Analyzing the Recent Windows Zero-Day Escalation of Privilege Exploit


Original article: By Jim Walter on Dec 12, 2013

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising