CVE-2013-5065 is a local privilege escalation vulnerability affecting the NDProxy.sys kernel driver in Microsoft Windows XP SP2/SP3 and Server 2003 SP2, allowing local users to gain elevated privileges via a crafted application. This vulnerability carries a high CVSS score of 7.8, indicating a significant impact with high confidentiality, integrity, and availability compromise, requiring user interaction. It has been actively exploited in the wild since November 2013, with multiple public exploit modules available, and has garnered substantial community and media attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.