Vulnerability details
CVE-2013-5065
Actively exploitedMicrosoft Windows
CVSS 3.1
7.8High
Official description
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.8High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| No product information recorded. | |||
References and advisories
5- http://www.fireeye.com/blog/technical/cyber-exploits/2013/11/ms-windows-local-privilege-escalation-zero-day-in-the-wild.html x_refsource_MISC
- https://www.exploit-db.com/exploits/37732/ exploitx_refsource_EXPLOIT-DB
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-002 vendor-advisoryx_refsource_MS
- http://technet.microsoft.com/security/advisory/2914486 x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-5065 government-resource
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2013-11-28
- Last updated
- 2025-10-22
- State
- Published
- Assigner (CNA)
- microsoft
CISA KEV catalog
- Date added
- 2022-03-03
- Due date
- 2022-03-24
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
34.65%
Probability of exploitation in 30 days
98.4%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- —