PT-2011-3018 · Microsoft · Windows Vista+5

J00Ru + 1 · Published 2011-07-13 · Updated 2024-10-17 · CVE-2011-1282

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1

Description The issue arises from the improper initialization of memory by the Client/Server Run-time Subsystem (CSRSS) in the Win32 subsystem, leading to the use of a NULL pointer in an unspecified function call. This allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction. An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a newer version that contains a fix for this issue. For Microsoft Windows Server 2003 version SP2, update to a newer version that contains a fix for this issue. For Microsoft Windows Vista versions SP1 through SP2, update to a newer version that contains a fix for this issue. For Microsoft Windows Server 2008 versions Gold through R2 SP1, update to a newer version that contains a fix for this issue. For Microsoft Windows 7 versions Gold through SP1, update to a newer version that contains a fix for this issue.

Fix

DoS

Buffer Overflow

NULL Pointer Dereference

Weakness Enumeration

CWE-119

CWE-476

Related Identifiers

CVE-2011-1282

Affected Products

Windows

Windows 7

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2011-1282 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-056 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1282 · Security Note
• http://us-cert.gov/cas/techalerts/TA11-193A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-056 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12402 · Note
• https://t.me/cvenotify/98655 · Telegram Post