Tarjei Mandt

**Name of the Vulnerable Software and Affected Versions** Mac OS X and iOS (affected versions not specified) **Description** The issue is related to errors in the code of Mac OS X and iOS operating systems. It can be exploited by a remote attacker using a specially crafted application to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mac OS X and iOS (affected versions not specified) **Description** The issue is related to errors in the code of Mac OS X and iOS. It can be exploited by a remote attacker using a specially crafted application to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2, R2, and R2 SP1 Windows 7 versions Gold and SP1 **Description** The issue arises from the improper handling of user-mode input passed to kernel mode for driver objects in Windows kernel-mode drivers. This allows local users to gain privileges via a crafted application. An elevation of privilege exists due to the way Windows kernel-mode drivers manage kernel-mode driver objects, enabling an attacker to run arbitrary code in kernel mode. This could lead to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights. **Recommendations** For Windows XP versions SP2 and SP3, update to a newer version to mitigate the risk. For Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Windows Vista version SP2, update to a newer version to mitigate the risk. For Windows Server 2008 versions SP2, R2, and R2 SP1, update to a newer version to mitigate the risk. For Windows 7 versions Gold and SP1, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 **Description** The issue arises from improper handling of user-mode input passed to kernel mode for driver objects, allowing local users to gain privileges via a crafted application. This is related to the management of kernel-mode driver objects by Windows kernel-mode drivers, enabling an attacker to run arbitrary code in kernel mode. As a result, an attacker could install programs, view, change, or delete data, or create new accounts with full administrative rights. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 versions SP2 through R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 versions Gold through SP1, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2, R2, and R2 SP1 Windows 7 versions Gold and SP1 **Description** The issue arises from improper handling of user-mode input passed to kernel mode for driver objects, allowing local users to gain privileges via a crafted application. This is related to the management of kernel-mode driver objects by Windows kernel-mode drivers, which could enable an attacker to run arbitrary code in kernel mode. As a result, an attacker could install programs, view, change, or delete data, or create new accounts with full administrative rights. **Recommendations** For Windows XP versions SP2 and SP3, update to a newer version to mitigate the risk. For Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Windows Vista version SP2, update to a newer version to mitigate the risk. For Windows Server 2008 versions SP2, R2, and R2 SP1, update to a newer version to mitigate the risk. For Windows 7 versions Gold and SP1, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2, R2, and R2 SP1 Microsoft Windows 7 Gold and SP1 on 64-bit platforms **Description** The issue arises from the Ancillary Function Driver (afd.sys) not properly validating user-mode input passed to kernel mode. This could allow a local attacker to gain privileges via a crafted application, potentially executing arbitrary code and taking complete control of an affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full administrative rights. **Recommendations** For Microsoft Windows XP SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2, R2, and R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 Gold and SP1 on 64-bit platforms, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the Ancillary Function Driver (afd.sys) to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 **Description** The issue is related to the management of specific keyboard layouts by the Windows kernel-mode driver, allowing local users to gain privileges via a crafted application that triggers keyboard layout errors. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights. **Recommendations** For Microsoft Windows XP versions SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 versions SP2, R2, and R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 versions Gold and SP1, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the `win32k.sys` driver to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Server 2003 SP2 **Description** The issue arises from improper validation of user-mode input passed to kernel mode by the Ancillary Function Driver (afd.sys) in Microsoft Windows. This could allow a local attacker to execute arbitrary code with elevated privileges, potentially leading to complete control of the affected system. The attacker could then install programs, view, change, or delete data, or create new accounts with full administrative rights. **Recommendations** For Microsoft Windows Server 2003 SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 **Description** The issue is related to incorrect driver object management in kernel-mode drivers, allowing local users to gain privileges via a crafted application. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights. **Recommendations** For Microsoft Windows XP versions SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista versions SP1 and SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 versions Gold and SP1, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the fixed version **Description** The issue is related to incorrect driver object management in kernel-mode drivers, allowing local users to gain privileges via a crafted application. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights. **Recommendations** For Microsoft Windows Vista SP1 and SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1, update to a version that includes the fix for this issue. For Microsoft Windows 7 Gold and SP1, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to kernel-mode drivers to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 **Description** The issue is related to incorrect driver object management in kernel-mode drivers, allowing local users to gain privileges via a crafted application. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights. **Recommendations** For Microsoft Windows XP versions SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista versions SP1 and SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 versions Gold and SP1, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Windows Vista versions SP1 through SP2 Windows Server 2008 versions Gold through R2 SP1 Windows 7 versions Gold through SP1 **Description** The issue allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference. An elevation of privilege vulnerability exists due to the way that Windows kernel-mode drivers manage pointers to kernel-mode driver objects. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full administrative rights. **Recommendations** For Windows Vista versions SP1 through SP2, update to a newer version to mitigate the risk. For Windows Server 2008 versions Gold through R2 SP1, update to a newer version to mitigate the risk. For Windows 7 versions Gold through SP1, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 **Description** The issue is related to incorrect driver object management in kernel-mode drivers, allowing local users to gain privileges via a crafted application. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full administrative rights. **Recommendations** For Microsoft Windows XP versions SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Windows Server 2003 version SP2, update to a newer version to mitigate the risk. For Microsoft Windows Vista versions SP1 and SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 versions Gold and SP1, update to a newer version to mitigate the risk.

**Name of the Vulnerable Software and Affected Versions** Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 through SP2 Windows Server 2008 versions Gold through R2 SP1 Windows 7 versions Gold through SP1 **Description** The issue allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference. This is a different issue than other similar vulnerabilities. **Recommendations** For Windows XP versions SP2 through SP3, apply the patch from Microsoft to resolve the issue. For Windows Server 2003 version SP2, apply the patch from Microsoft to resolve the issue. For Windows Vista versions SP1 through SP2, apply the patch from Microsoft to resolve the issue. For Windows Server 2008 versions Gold through R2 SP1, apply the patch from Microsoft to resolve the issue. For Windows 7 versions Gold through SP1, apply the patch from Microsoft to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1 **Description** A use-after-free issue in the win32k.sys driver allows local users to gain privileges through a crafted application, leveraging incorrect driver object management. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows Server 2003 version SP2, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows Vista versions SP1 through SP2, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows Server 2008 versions Gold through R2 SP1, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows 7 versions Gold through SP1, apply the patch provided by Microsoft to fix the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 **Description** A use-after-free issue in the win32k.sys kernel-mode driver allows local users to gain privileges via a crafted application. This is due to incorrect driver object management. The issue is specific to the listed Microsoft Windows versions. **Recommendations** For Microsoft Windows XP SP2 and SP3, consider applying configuration changes to restrict access to the win32k.sys driver until a patch is available. For Microsoft Windows Server 2003 SP2, restrict access to the win32k.sys driver to minimize the risk of exploitation. For Microsoft Windows Vista SP1 and SP2, disable any unnecessary features that interact with the win32k.sys driver. For Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1, apply specific configuration changes to the win32k.sys driver. For Microsoft Windows 7 Gold and SP1, consider temporarily disabling the win32k.sys driver until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1 **Description** A use-after-free issue in the win32k.sys driver allows local users to gain privileges via a crafted application, leveraging incorrect driver object management. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows Server 2003 version SP2, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows Vista versions SP1 through SP2, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows Server 2008 versions Gold through R2 SP1, apply the patch provided by Microsoft to fix the issue. For Microsoft Windows 7 versions Gold through SP1, apply the patch provided by Microsoft to fix the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 **Description** A use-after-free issue in the win32k.sys kernel-mode driver allows local users to gain privileges through a crafted application. This is due to incorrect driver object management. **Recommendations** For Microsoft Windows XP SP2 and SP3, consider applying configuration changes to restrict access to the win32k.sys driver until a patch is available. For Microsoft Windows Server 2003 SP2, restrict access to the win32k.sys driver to minimize the risk of exploitation. For Microsoft Windows Vista SP1 and SP2, consider disabling the win32k.sys driver as a temporary workaround. For Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1, avoid using the affected driver object management functionality until the issue is resolved. For Microsoft Windows 7 Gold and SP1, restrict access to the win32k.sys driver to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 **Description** A use-after-free issue in the win32k.sys kernel-mode driver allows local users to gain privileges via a crafted application. This is due to incorrect driver object management. The issue is specific to the listed Microsoft Windows versions. **Recommendations** For Microsoft Windows XP versions SP2 and SP3, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows Server 2003 version SP2, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows Vista versions SP1 and SP2, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows 7 versions Gold and SP1, apply the patch from MS11-034 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1 **Description** A use-after-free issue in the win32k.sys driver allows local users to gain privileges through a crafted application, leveraging incorrect driver object management. **Recommendations** For Microsoft Windows XP versions SP2 through SP3, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows Server 2003 version SP2, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows Vista versions SP1 through SP2, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows Server 2008 versions Gold through R2 SP1, apply the patch from MS11-034 to resolve the issue. For Microsoft Windows 7 versions Gold through SP1, apply the patch from MS11-034 to resolve the issue.