PT-2009-2780 · Microsoft · Windows Vista+2
Cesar Cerrudo
·
Publicado
2009-04-15
·
Atualizado
2021-11-08
·
CVE-2009-0080
CVSS v2.0
6.9
Média
| Vetor | AV:L/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Windows Vista versions prior to SP2
Windows Server 2008 versions prior to SP2
Description
The issue arises from the improper implementation of isolation among processes running under the same account, allowing local users to gain privileges by accessing resources of other processes due to incorrect thread ACLs. This could enable an attacker to run code with elevated privileges, potentially leading to the execution of arbitrary code and complete control of the affected system. An attacker could then perform various malicious actions such as installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights.
Recommendations
For Windows Vista versions prior to SP2, update to SP2 or a later service pack to resolve the issue.
For Windows Server 2008 versions prior to SP2, update to SP2 or a later service pack to resolve the issue.
Exploit
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Windows
Windows Server 2008
Windows Vista