CVE-2013-3198

CVE-2013-3198 is a kernel memory corruption vulnerability affecting the NT Virtual DOS Machine (NTVDM) subsystem in 32-bit versions of Microsoft Windows XP, Server 2003, Vista, Server 2008, Windows 7, and Windows 8. This flaw allows a local attacker to gain elevated privileges or cause a denial of service by running a specially crafted application that exploits improper validation of kernel-memory addresses. With a CVSS score of 7.2 (High), it presents a significant risk for privilege escalation and system compromise, requiring local access but with low attack complexity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.