CVE-2013-3862

EUVD-2013-3794
Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager (SCM), aka "Service Control Manager Double Free Vulnerability."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_7
*
microsoftwindows_7
*
microsoftwindows_server_2008
*
microsoftwindows_server_2008
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.us-cert.gov/ncas/alerts/TA13-253A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-077
http://www.us-cert.gov/ncas/alerts/TA13-253A
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-077