PT-2009-2782 · Microsoft · Windows Vista+6

Thomas Garnier · Published 2009-03-10 · Updated 2025-01-21 · CVE-2009-0082

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4, XP SP2, XP SP3, Server 2003 SP1, Server 2003 SP2, Vista Gold, Vista SP1, Server 2008

Description The Windows kernel does not properly validate handles, allowing local users to gain privileges via a crafted application. This could enable an attacker to run arbitrary code in kernel mode, potentially leading to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Windows 2000 SP4, update to a newer version to mitigate the risk. For Windows XP SP2 and SP3, update to a newer version to mitigate the risk. For Windows Server 2003 SP1 and SP2, update to a newer version to mitigate the risk. For Windows Vista Gold and SP1, update to a newer version to mitigate the risk. For Windows Server 2008, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to the kernel until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-0082

Affected Products

Windows

Windows 2000

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

Windows Kernel

References · 14

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0082 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0082 · Security Note
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid= · Note
• http://securityfocus.com/bid/34027 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-006 · Note
• http://osvdb.org/52523 · Note
• http://secunia.com/advisories/34117 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm · Note
• http://us-cert.gov/cas/techalerts/TA09-069A.html · Note
• https://t.me/cvenotify/108039 · Telegram Post
• http://securitytracker.com/id?1021827 · Note
• http://vupen.com/english/advisories/2009/0659 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6036 · Note