Product:
Windows
Summary
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application. This vulnerability was actively exploited in the wild in November 2013.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2013-5065 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and execute a specially crafted application that targets the NDProxy.sys component. Successful exploitation can lead to elevated privileges, allowing the attacker to perform unauthorized actions on the system.
Affected Products
- Windows XP SP2: Affected by the NDProxy.sys vulnerability, allowing local privilege escalation.
- Windows XP SP3: Similar vulnerability as SP2, enabling local users to gain elevated privileges.
- Windows Server 2003 SP2: Also affected, permitting local users to exploit the NDProxy.sys for privilege escalation.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Keeping systems updated is crucial to protect against known vulnerabilities.