SCF Advanced Search

  • Total Posts: 36502
  • Total Topics: 11503
  • Online Today: 1304
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)

Post reply

Message icon:

Type the letters shown in the picture
Listen to the letters / Request another image

Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters)

shortcuts: hit alt+s to submit/post or alt+p to preview

Topic Summary

Posted by: Pez
« on: 16. December 2013., 12:30:59 »

Windows XP, 2003 Server: Product Coverage and Mitigation for CVE-2013-5065

On November 27th, 2013, Microsoft published Security Advisory 2914486, which coverers a elevation of privilege vulnerability in certain versions of Windows XP and Windows Server 2003.

The flaw lies in the NDProxy component of the windows kernel.  Note, exploitation requires that an attacker holds local login credentials.

This threat is currently being exploited in limited and targeted attacks.  Functional exploitation and malware artifacts have been identified in the wild.

Remediation / Mitigation

Microsoft has provided a workaround to address this issue. Details are available at:

McAfee Labs
The following McAfee products / content provide coverage

McAfee Vulnerability Manager
 McAfee MVM / FSL Content Release of 11/28/2013
McAfee Antivirus
 Coverage is provided in the 7276 DATs, released on 12/1/2013
 Name – Exploit-CVE2013-5065

Further reading:
Analyzing the Recent Windows Zero-Day Escalation of Privilege Exploit

Original article: By Jim Walter on Dec 12, 2013

Enter your email address to receive daily email with ' - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising