CVE-2013-3196

CVE-2013-3196 is a kernel memory corruption vulnerability affecting the NT Virtual DOS Machine (NTVDM) subsystem in various 32-bit Microsoft Windows operating systems, including XP, Vista, 7, 8, Server 2003, and Server 2008. This flaw stems from improper validation of kernel-memory addresses, allowing a local attacker to gain elevated privileges or cause a denial of service through a specially crafted application. With a CVSS score of 7.2, it is considered highly severe due to its local attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.