PT-2011-2041 · Microsoft · Windows Xp+1

Published 2011-02-08 · Updated 2018-10-12 · CVE-2011-0045

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3

Description The issue is related to the improper performance of type conversion in the kernel, leading to integer truncation and insufficient memory allocation, which triggers a buffer overflow. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the way the Windows kernel allocates memory when reading user-supplied data, potentially allowing an attacker to run arbitrary code in kernel mode and take complete control of an affected system.

Recommendations For Microsoft Windows XP SP3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0045

ZDI-11-064

Affected Products

Windows

Windows Xp

References · 16

• 🔥 https://exploit-db.com/exploits/16262 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-0045 · Security Note
• http://vupen.com/english/advisories/2011/0324 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-011 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0045 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-064 · Security Note
• http://securityfocus.com/archive/1/516276/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11996 · Note
• http://support.avaya.com/css/P8/documents/100127248 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-011 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64926 · Note
• http://securityreason.com/securityalert/8110 · Note
• http://securityfocus.com/bid/46136 · Note
• http://osvdb.org/70823 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-064 · Note