PT-2012-3592 · Microsoft · Windows Kernel-Mode Driver+1

H4Ckmp · Published 2012-05-08 · Updated 2023-12-07 · CVE-2012-1848

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows kernel-mode driver versions prior to the fixed version

Description The issue is related to the improper handling of user-mode input passed to kernel mode, allowing local users to gain privileges via a crafted application. An elevation of privilege exists in the Windows kernel-mode driver, which could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full administrative rights.

Recommendations For Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-1848

Affected Products

Windows

Windows Kernel-Mode Driver

References · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1848 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1848 · Security Note
• http://securityfocus.com/bid/53327 · Note
• http://securitytracker.com/id?1027039 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15555 · Note
• http://us-cert.gov/cas/techalerts/TA12-129A.html · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-034 · Note