{"uuid": "fb6c68bf-1fa2-49ef-8105-8a8a10383cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3660", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ppr_flatten_rec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86\", \"author\": [\"Tavis Ormandy \", \"progmboy \", \"Keebie4e\", \"egypt \", \"sinn3r \", \"Ben Campbell \", \"juan vazquez \", \"OJ Reeves\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability on EPATHOBJ::pprFlattenRec due to the usage\\n            of uninitialized data which allows to corrupt memory. At the moment, the module has\\n            been tested successfully on Windows XP SP3, Windows 2003 SP1, and Windows 7 SP1.\", \"disclosure_date\": \"2013-05-15\", \"fullname\": \"exploit/windows/local/ppr_flatten_rec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"Windows EPATHOBJ::pprFlattenRec Local Privilege Escalation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/local/ppr_flatten_rec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/local/ppr_flatten_rec\", \"references\": [\"CVE-2013-3660\", \"EDB-25912\", \"OSVDB-93539\", \"MSB-MS13-053\", \"URL-https://seclists.org/fulldisclosure/2013/May/91\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:12.850069Z"}