CVE-2013-0078

The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:microsoft:windows_defender:*:*:*:*:*:*:*:*
OR cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-04-09 22:55

Updated : 2024-02-04 18:16


NVD link : CVE-2013-0078

Mitre link : CVE-2013-0078

CVE.ORG link : CVE-2013-0078


JSON object : View

Products Affected

microsoft

  • windows_rt
  • windows_8
  • windows_defender
CWE
CWE-20

Improper Input Validation