« Volver al listado

CVE-2013-3862

Estado: ModificadaMedia (6.9)—

Vulnerabilidad de doble liberación en Microsoft Windows 7 y Server 2008 R2 SP1permite a usuarios locales obtener privilegios a través de una descripción de servicio manipulada que no es apropiadamente manejada por servicios .exe en el Service Control Manager (SCM), tambien conocida como "Vulnerabilidad de Doble Liberación en Service Control Manager".

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Microsoft — Windows 7Microsoft — Windows Server 2008

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-3862",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-09-11T14:03:48.313",
  "references": [
    {
      "url": "http://www.us-cert.gov/ncas/alerts/TA13-253A",
      "tags": [
        "US Government Resource"
      ],
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-077",
      "source": "secure@microsoft.com"
    },
    {
      "url": "http://www.us-cert.gov/ncas/alerts/TA13-253A",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-077",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager (SCM), aka \"Service Control Manager Double Free Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de doble liberación en Microsoft Windows 7 y Server 2008 R2 SP1permite a usuarios locales obtener privilegios a través de una descripción de servicio manipulada que no es apropiadamente manejada por servicios .exe en el Service Control Manager (SCM), tambien conocida como \"Vulnerabilidad de Doble Liberación en Service Control Manager\"."
    }
  ],
  "lastModified": "2026-06-16T23:55:55.323",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FA15D65-7C32-4C7A-9915-746AB3F454EE"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "976EFC05-9B37-4661-AD34-4FFDB5AB48E0"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2B19826-5516-4899-9599-F95D0A03FBCD"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4945F25F-2828-4D03-930B-A109BA73E00C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}