PT-2012-3610 · Microsoft · Windows Server 2008+5
J00Ru
+1
·
Published
2012-06-12
·
Updated
2024-10-17
·
CVE-2012-1867
CVSS v3.1
8.4
High
| Vector | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Microsoft Windows XP versions SP2 through SP3
Microsoft Windows Server 2003 version SP2
Microsoft Windows Vista version SP2
Microsoft Windows Server 2008 versions SP2 through R2 SP1
Microsoft Windows 7 versions Gold through SP1
Description
The issue arises from an integer overflow in the win32k.sys file within the kernel-mode drivers, which occurs when handling TrueType font files. This can lead to incorrect memory allocation. An attacker could exploit this to run arbitrary code in kernel mode, potentially allowing them to install programs, view, change, or delete data, or create new accounts with full administrative rights.
Recommendations
For Microsoft Windows XP versions SP2 through SP3, update to a newer version that contains a fix for this issue.
For Microsoft Windows Server 2003 version SP2, update to a newer version that contains a fix for this issue.
For Microsoft Windows Vista version SP2, update to a newer version that contains a fix for this issue.
For Microsoft Windows Server 2008 versions SP2 through R2 SP1, update to a newer version that contains a fix for this issue.
For Microsoft Windows 7 versions Gold through SP1, update to a newer version that contains a fix for this issue.
As a temporary workaround, consider restricting the use of TrueType font files until a patch is available.
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Windows
Windows 7
Windows Server 2003
Windows Server 2008
Windows Vista
Windows Xp