PT-2009-2780 · Microsoft · Windows Vista+2

Cesar Cerrudo · Published 2009-04-15 · Updated 2021-11-08 · CVE-2009-0080

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Vista versions prior to SP2 Windows Server 2008 versions prior to SP2

Description The issue arises from the improper implementation of isolation among processes running under the same account, allowing local users to gain privileges by accessing resources of other processes due to incorrect thread ACLs. This could enable an attacker to run code with elevated privileges, potentially leading to the execution of arbitrary code and complete control of the affected system. An attacker could then perform various malicious actions such as installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Windows Vista versions prior to SP2, update to SP2 or a later service pack to resolve the issue. For Windows Server 2008 versions prior to SP2, update to SP2 or a later service pack to resolve the issue.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2009-0080

Affected Products

Windows

Windows Server 2008

Windows Vista

References · 10

• 🔥 https://exploit-db.com/exploits/32893 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0080 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0080 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012 · Vendor Advisory
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-012 · Note
• http://osvdb.org/53668 · Note
• http://securitytracker.com/id?1022044 · Note
• http://vupen.com/english/advisories/2009/1026 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6177 · Note
• http://us-cert.gov/cas/techalerts/TA09-104A.html · Note