PT-2012-2376 · Microsoft · Windows Vista+4

Published 2012-05-08 · Updated 2023-12-07 · CVE-2012-0178

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Partition Manager versions in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1

Description The issue is related to an elevation of privilege vulnerability in the way Windows Partition Manager handles device relations requests. This could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full administrative rights. The vulnerability can be exploited by making multiple simultaneous Plug and Play (PnP) Configuration Manager function calls via a crafted application.

Recommendations For Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0178

Affected Products

Windows

Windows 7

Windows Partition Manager

Windows Server 2008

Windows Vista

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0178 · Security Note
• http://secunia.com/advisories/49115 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0178 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-033 · Vendor Advisory
• http://technet.microsoft.com/en-us/security/bulletin/ms12-033 · Note
• http://us-cert.gov/cas/techalerts/TA12-129A.html · Note
• http://securitytracker.com/id?1027043 · Note
• http://securityfocus.com/bid/53378 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15229 · Note
• http://osvdb.org/81735 · Note