CVE-2013-3173

CVE-2013-3173 is a buffer overflow vulnerability in the win32k.sys kernel-mode driver affecting numerous Microsoft Windows operating systems, including Windows XP through Windows 8 and various Server editions. This flaw allows a local attacker to gain elevated privileges through a specially crafted application that manipulates memory objects. With a CVSS score of 7.2, it is considered highly severe due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation is indicated, and community discussion is minimal, the vulnerability's potential for privilege escalation makes it a significant concern for affected systems.