CVE-2013-5065
HIGH KEVMicrosoft Windows XP/Server 2003 - Privilege Escalation
Title source: llmDescription
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/30392
exploitdb
WORKING POC
VERIFIED
by ryujin · pythonlocalwindows
https://www.exploit-db.com/exploits/30014
exploitdb
WORKING POC
by Tomislav Paskalev · clocalwindows_x86
https://www.exploit-db.com/exploits/37732
References (5)
Scores
CVSS v3
7.8
EPSS
0.7358
EPSS Percentile
98.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CISA KEV
2022-03-03
VulnCheck KEV
2013-11-27
InTheWild.io
2018-10-12
ENISA EUVD
EUVD-2013-4907
Status
published
Products (2)
microsoft/windows_2003_server
microsoft/windows_xp
(2 CPE variants)
Published
Nov 28, 2013
KEV Added
Mar 03, 2022
Tracked Since
Feb 18, 2026