PT-2012-3611 · Microsoft · Win32K.Sys+2

Publicado 2012-06-12 · Atualizado 2018-10-12 · CVE-2012-1868

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3

Description The issue is related to a race condition in the thread-creation implementation in the Windows kernel, specifically in win32k.sys. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the way the kernel handles specific thread creation attempts, potentially enabling an attacker to run arbitrary code in kernel mode. This could lead to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights.

Recommendations For Microsoft Windows XP SP3, consider applying security patches or updates that address the kernel-mode drivers issue, specifically the win32k.sys race condition, to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2012-1868

Produtos afetados

Windows

Windows Xp

Win32K.Sys

Referências · 6

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-041 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA12-164A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1868 · Nota de Segurança
• http://technet.microsoft.com/en-us/security/bulletin/ms12-041 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1868 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15647 · Nota