CVE:CVE-2013-3660
CNNVD:CNNVD-201305-540
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Microsoft Windows XP SP2和SP3，Windows Server 2003 SP2，Windows Vista SP2，Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Windows 8，Windows Server 2012，Windows RT中的win32k.sys中的‘EPATHOBJ::pprFlattenRec’函数中存在漏洞，该漏洞源于程序对特定列表中的下个对象没有正确初始化指针。本地攻击者可通过触发消耗大量的页面内存，并使用许多FlattenPath函数调用利用该漏洞获得对PATHRECORD链的写入访问权限，进而获得特权。
solution:Upgrade microsoft windows_7 to a higher version than *:sp1,and avoid the version *:sp1; Upgrade microsoft windows_8 to a higher version than -; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,r2:sp1,and avoid the version *:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3