Unscored CVE-2013-0078 EUVD-2013-0121GHSA-ggpx-9gxx-fx4v

The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows l…

Published Apr 9, 2013 · Updated Aug 6, 2024 · Assigned by microsoft

Description

The Microsoft Antimalware Client in Windows Defender on Windows 8 and Windows RT uses an incorrect pathname for MsMpEng.exe, which allows local users to gain privileges via a crafted application, aka "Microsoft Antimalware Improper Pathname Vulnerability."

References

MS13-034 vendor-advisory
TA13-100A third-party-advisory
oval:org.mitre.oval:def:16293 vdb-entry signature