Vulnerability in Microsoft Windows 2003 Server
CVE-2013-3956
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.
EPSS: 0.078 (94.0th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2003_server
- Microsoft Windows_7
- Microsoft Windows_8
- Microsoft Windows_server_2008 — versions r2
- Microsoft Windows_vista
- Microsoft Windows_xp
- Novell Client — versions 4.91, 2.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2013-3956?
- CVE-2013-3956 is a vulnerability in Microsoft Windows 2003 Server, classified under CWE-264. Published 2013-07-31.
- Is CVE-2013-3956 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.