9 - MS13-050

Executive Summary

Summary
Title	Vulnerability in Windows Print Spooler Components Could Allow Elevation of Privilege

Informations
Name	MS13-050	First vendor Publication	2013-06-11
Vendor	Microsoft	Last vendor Modification	2013-12-16
Severity (Vendor)	Version	Revision	1.1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:C/I:C/A:C)
Cvss Base Score	9	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	8	Authentication	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Severity Rating: Important
Revision Note: V1.1 (December 16, 2013): Revised bulletin to announce a detection change to correct an offering issue for Windows RT (2839894). This is a detection change only. There were no changes to the update files. Customers who have successfully installed the update do not need to take any action.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege when an authenticated attacker deletes a printer connection. An attacker must have valid logon credentials and be able to log on to exploit this vulnerability.

Original Source

Url : https://technet.microsoft.com/en-us/library/security/MS13-050

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-399	Resource Management Errors

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:16837

Oval ID:	oval:org.mitre.oval:def:16837
Title:	Vulnerability in Windows Print Spooler Components Could Allow Elevation of Privilege - MS13-050
Description:	The Print Spooler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly manage memory during deletion of printer connections, which allows remote authenticated users to execute arbitrary code via a crafted request, aka "Print Spooler Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-1339	Version:	3
Platform(s):	Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):
Definition Synopsis:
For Microsoft Windows OS and Win32spl.dll version (GDR/LDR) Microsoft Windows Vista and Windows Server 2008 x64/ia64 is installed Microsoft Windows Vista (32-bit) Service Pack 2 is installed AND Microsoft Windows Vista x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed AND Microsoft Windows Server 2008 x64 Edition Service Pack 2 is installed AND Microsoft Windows Server 2008 Itanium-Based Edition Service Pack 2 is installed AND GDR/LDR for Vista and 2008 Check if the file version of Win32spl.dll is less than 6.0.6002.18832 OR LDR for Check if the version of Win32spl.dll is greater than or equal to 6.0.6002.23000 AND Check if the file version of Win32spl.dll is less than 6.0.6002.23103 OR For Microsoft Windows OS Base and Win32spl.dll version (GDR/LDR) For Microsoft Windows 7 / Server 2008 R2 x86/x64/ia64 SP1 is installed Microsoft Windows 7 (32-bit) Service Pack 1 is installed AND Microsoft Windows 7 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 x64 Service Pack 1 is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition Service Pack 1 is installed AND GDR/LDR for 7 and R2 SP1 Check if the file version of Win32spl.dll is less than 6.1.7601.18142 OR LDR for 7 and R2 SP1 Check if the version of Win32spl.dll is greater than or equal to 6.1.7601.22000 AND Check if the file version of Win32spl.dll is less than 6.1.7601.22311 OR For Microsoft Windows OS and Win32spl.dll version (GDR/LDR) For Microsoft Windows 8 and Windows Server 2012 x86/x64 is installed Microsoft Windows 8 is installed AND Microsoft Windows Server 2012 is installed AND GDR/LDR for 8 and 2012 Check if the file version of Win32spl.dll is less than 6.2.9200.16598 OR LDR for 8 and 2012 Check if the file version of Win32spl.dll is greater than or equal to or equal to 6.2.9200.20000 AND Check if the file version of Win32spl.dll is less than 6.2.9200.20702

CPE : Common Platform Enumeration

Type	Description	Count
Os	Microsoft Windows 7 cpe:2.3:o:microsoft:windows_7:-:sp1:::ultimate_n::x86: cpe:2.3:o:microsoft:windows_7:-:sp1:::ultimate_n::x64:	2
Os	Microsoft Windows 8 cpe:2.3:o:microsoft:windows_8:-::::pro_n::x64:* cpe:2.3:o:microsoft:windows_8:-::::pro_n::x86:*	2
Os	Microsoft Windows Rt cpe:2.3:o:microsoft:windows_rt:-:::::::*	1
Os	Microsoft Windows Server 2008 cpe:2.3:o:microsoft:windows_server_2008::sp2:x64::::: cpe:2.3:o:microsoft:windows_server_2008::sp2:itanium::::: cpe:2.3:o:microsoft:windows_server_2008::sp2:x86:::::	3
Os	Microsoft Windows Server 2012 cpe:2.3:o:microsoft:windows_server_2012:-:::::::*	1
Os	Microsoft Windows Vista cpe:2.3:o:microsoft:windows_vista::sp2::::::* cpe:2.3:o:microsoft:windows_vista:-:sp2::::::	2

Information Assurance Vulnerability Management (IAVM)

Date	Description
2013-06-13	IAVM : 2013-A-0120 - Microsoft Windows Print Spooler Privilege Escalation Vulnerability Severity : Category I - VMSKEY : V0039072

Nessus® Vulnerability Scanner

Date	Description
2013-06-11	Name : The remote Windows host is potentially affected by a privilege escalation vul... File : smb_nt_ms13-050.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2017-09-19 09:28:13	Multiple Updates
2016-07-21 12:09:29	Multiple Updates
2014-05-06 11:35:08	Multiple Updates
2014-05-06 11:33:22	Multiple Updates
2014-04-19 00:26:07	Multiple Updates
2014-04-19 00:18:03	Multiple Updates
2014-04-18 21:28:37	Multiple Updates
2014-04-18 21:19:29	Multiple Updates
2014-04-18 17:26:22	Multiple Updates
2014-04-18 17:18:38	Multiple Updates
2014-04-18 13:29:53	Multiple Updates
2014-04-18 13:19:18	Multiple Updates
2014-04-18 09:27:08	Multiple Updates
2014-04-18 09:19:03	Multiple Updates
2014-04-18 05:28:01	Multiple Updates
2014-04-18 05:20:07	Multiple Updates
2014-04-18 00:26:20	Multiple Updates
2014-04-18 00:18:08	Multiple Updates
2014-04-17 21:25:58	Multiple Updates
2014-04-17 21:19:26	Multiple Updates
2014-04-17 17:26:36	Multiple Updates
2014-04-17 17:18:23	Multiple Updates
2014-04-17 13:29:30	Multiple Updates
2014-04-17 13:19:48	Multiple Updates
2014-04-17 09:07:54	Multiple Updates
2014-02-17 11:47:41	Multiple Updates
2013-12-17 05:16:00	Multiple Updates
2013-11-11 12:41:34	Multiple Updates
2013-06-12 17:21:29	Multiple Updates
2013-06-12 13:21:33	Multiple Updates
2013-06-11 21:15:41	First insertion

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	1
CPE ID(s)	11
IAVM(s)	1
Nessus® Exploit(s)	1

	Related
10	MS13-105
10	MS13-083
10	MS13-067
10	MS13-062
10	MS13-042
10	MS13-015
10	MS13-001
9.3	MS13-099
9.3	MS13-097
9.3	MS13-096
9.3	MS13-091
9.3	MS13-090
9.3	MS13-089
9.3	MS13-088
9.3	MS13-086
9.3	MS13-085
9.3	MS13-084
9.3	MS13-082
9.3	MS13-081
9.3	MS13-080
9.3	MS13-074
9.3	MS13-073
9.3	MS13-072
9.3	MS13-071
9.3	MS13-070
9.3	MS13-069
9.3	MS13-068
9.3	MS13-060
9.3	MS13-059
9.3	MS13-057
9.3	MS13-056
9.3	MS13-055
9.3	MS13-054
9.3	MS13-053
9.3	MS13-052
9.3	MS13-051
9.3	MS13-047
9.3	MS13-043
9.3	MS13-041
9.3	MS13-038
9.3	MS13-037
9.3	MS13-029
9.3	MS13-028
9.3	MS13-023
9.3	MS13-022
9.3	MS13-021
9.3	MS13-020
9.3	MS13-011
9.3	MS13-010
9.3	MS13-009
9.3	MS13-008
9.3	MS13-004
9.3	MS13-002
9	CVE-2013-1339
7.9	MS13-092
7.8	MS13-065
7.8	MS13-064
7.8	MS13-039
7.8	MS13-024
7.8	MS13-018
7.8	MS13-007
7.6	MS13-098
7.5	MS13-063
7.5	MS13-040
7.2	MS13-101
7.2	MS13-076
7.2	MS13-046
7.2	MS13-034
7.2	MS13-033
7.2	MS13-027
7.2	MS13-019
7.2	MS13-017
7.2	MS13-005
7.1	MS13-049
7.1	MS13-036
7.1	MS13-014
6.9	MS13-102
6.9	MS13-077
6.9	MS13-075
6.9	MS13-058
6.8	MS13-100
6.8	MS13-061
6.8	MS13-045
6.8	MS13-012
5.8	MS13-006
5	MS13-095
5	MS13-094
5	MS13-079
5	MS13-066
5	MS13-032
5	MS13-026
5	MS13-025
4.9	MS13-093
4.9	MS13-031
4.9	MS13-016
4.4	MS13-048
4.3	MS13-106
4.3	MS13-104
4.3	MS13-103
4.3	MS13-087
4.3	MS13-078
4.3	MS13-044
4.3	MS13-035
4.3	MS13-003
3.5	MS13-030
2.1	MS13-013
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 106 more Alert(s)

9 - MS13-050

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU