CVE-2013-5065

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

NDProxy.sys in the kernel of Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 contains a vulnerability that permits local privilege escalation when a crafted application is executed. The flaw is tracked as CVE-2013-5065 with a CVSS 3.1 score of 7.8 reflecting local attack vector, low complexity, and high impact on confidentiality, integrity, and availability.

Local users without administrative rights can exploit the issue by running a malicious application that triggers the flaw in NDProxy.sys, resulting in elevated privileges on affected systems. Public references confirm the vulnerability was exploited in the wild as early as November 2013.

Microsoft security advisory 2914486 and bulletin MS14-002 address the issue and provide mitigation guidance, while additional details appear in FireEye reporting and a public exploit on Exploit-DB. The vulnerability was publicly disclosed and actively used in targeted attacks during late 2013.