PT-2012-2231 · Microsoft · Windows Vista+4

Kang Wu · Published 2012-01-10 · Updated 2023-12-07 · CVE-2012-0005

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 version SP2

Description The issue allows local users to gain privileges via a crafted application when a Chinese, Japanese, or Korean system locale is used. An elevation of privilege vulnerability exists due to the way the Windows CSRSS processes a sequence of specially crafted Unicode characters. This could allow an attacker to run arbitrary code in the security context of the local system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a version that includes the fix for this issue. For Microsoft Windows Server 2003 version SP2, apply the necessary patch to resolve the elevation of privilege vulnerability. For Microsoft Windows Vista version SP2, ensure that all security updates are applied to mitigate the risk. For Microsoft Windows Server 2008 version SP2, consider restricting access to sensitive data and accounts until a patch is applied.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0005

Affected Products

Windows

Windows Server 2003

Windows Server 2008

Windows Vista

Windows Xp

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2012-0005 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0005 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-003 · Vendor Advisory
• http://securitytracker.com/id?1026495 · Note
• http://us-cert.gov/cas/techalerts/TA12-010A.html · Note
• http://technet.microsoft.com/en-us/security/bulletin/MS12-003 · Note
• http://securityfocus.com/bid/51270 · Note
• http://secunia.com/advisories/47479 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14879 · Note