PT-2011-2041 · Microsoft · Windows Xp+1

Publicado 2011-02-08 · Atualizado 2018-10-12 · CVE-2011-0045

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3

Description The issue is related to the improper performance of type conversion in the kernel, leading to integer truncation and insufficient memory allocation, which triggers a buffer overflow. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the way the Windows kernel allocates memory when reading user-supplied data, potentially allowing an attacker to run arbitrary code in kernel mode and take complete control of an affected system.

Recommendations For Microsoft Windows XP SP3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-0045

ZDI-11-064

Produtos afetados

Windows

Windows Xp

Referências · 16

• 🔥 https://exploit-db.com/exploits/16262 · Exploit
• http://securityfocus.com/archive/1/516276/100/0/threaded · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11996 · Nota
• http://support.avaya.com/css/P8/documents/100127248 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0045 · Nota de Segurança
• http://vupen.com/english/advisories/2011/0324 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-011 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64926 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-011 · Aviso do Fabricante
• http://securityreason.com/securityalert/8110 · Nota
• http://securityfocus.com/bid/46136 · Nota
• http://osvdb.org/70823 · Nota
• http://zerodayinitiative.com/advisories/ZDI-11-064 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0045 · Nota de Segurança
• http://securitytracker.com/id?1025046 · Nota