← Back

CVE-2013-3862

nvd nist
Published: Sep 11, 2013Modified: Apr 29, 2026

JSON object

Loading...
6.9
Vector
AV:L/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 3.4 / Impact: 10.0
Source: NVD

Description

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager (SCM), aka "Service Control Manager Double Free Vulnerability."

Affected (4)

Microsoft
2 products
Windows 7
Windows Server 2008
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows 7
All versions
Windows 7
All versions
Microsoft
Windows Server 2008
All versions
Windows Server 2008
All versions

Related CWEs

CWE-399
CWE-399

References (4)

Source: secure@microsoft.com
US Government Resource
Source: secure@microsoft.com
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.