MS13-046  Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation Of Privilege

2013-05-14 This security update resolves three privately reported vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit these vulnerabilities.
Vulnerabilities addressed in this bulletin:

DirectX Graphics Kernel Subsystem Double Fetch Vulnerability

An elevation of privilege vulnerability exists when the Microsoft DirectX graphics kernel subsystem (dxgkrnl.sys) improperly handles objects in memory.
CVE-2013-1332

Win32k Buffer Overflow Vulnerability

CVE-2013-1333

Win32k Window Handle Vulnerability

CVE-2013-1334

Bulletin details at Microsoft.com