CVE-2011-1229

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-1229
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx Vendor Advisory
http://osvdb.org/71735 Broken Link
http://secunia.com/advisories/44156 Third Party Advisory
http://support.avaya.com/css/P8/documents/100133352 Third Party Advisory
http://www.securityfocus.com/bid/47229 Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1025345 Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA11-102A.html Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2011/0952 Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66411 VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12503 Third Party Advisory
http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx Vendor Advisory
http://osvdb.org/71735 Broken Link
http://secunia.com/advisories/44156 Third Party Advisory
http://support.avaya.com/css/P8/documents/100133352 Third Party Advisory
http://www.securityfocus.com/bid/47229 Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1025345 Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA11-102A.html Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2011/0952 Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66411 VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12503 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:avaya:agent_access:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:aura_conferencing_standard_edition:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:avaya:basic_call_management_system_reporting_desktop:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:call_management_server_supervisor:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:callpilot:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:callvisor_asai_lan:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:communication_server_1000_telephony_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:computer_telephony:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:contact_center_express:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:customer_interaction_express:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:enterprise_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:integrated_management:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:interaction_center:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:ip_agent:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:ip_softphone:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:meeting_exchange:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:messaging_application_server:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:network_reporting:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:octelaccess_server:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:octeldesigner:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:operational_analyst:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:outbound_contact_management:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:speech_access:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:unified_communication_center:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:unified_messenger:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:visual_messenger:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:visual_vector_client:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:vpnmanager_console:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:web_messenger:*:*:*:*:*:*:*:*
History

21 Nov 2024, 01:25

Type Values Removed Values Added
References () http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - Vendor Advisory () http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx - Vendor Advisory
References () http://osvdb.org/71735 - Broken Link () http://osvdb.org/71735 - Broken Link
References () http://secunia.com/advisories/44156 - Third Party Advisory () http://secunia.com/advisories/44156 - Third Party Advisory
References () http://support.avaya.com/css/P8/documents/100133352 - Third Party Advisory () http://support.avaya.com/css/P8/documents/100133352 - Third Party Advisory
References () http://www.securityfocus.com/bid/47229 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/47229 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1025345 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id?1025345 - Third Party Advisory, VDB Entry
References () http://www.us-cert.gov/cas/techalerts/TA11-102A.html - Third Party Advisory, US Government Resource () http://www.us-cert.gov/cas/techalerts/TA11-102A.html - Third Party Advisory, US Government Resource
References () http://www.vupen.com/english/advisories/2011/0952 - Broken Link () http://www.vupen.com/english/advisories/2011/0952 - Broken Link
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 - Patch, Vendor Advisory () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/66411 - VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/66411 - VDB Entry
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12503 - Third Party Advisory () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12503 - Third Party Advisory
Information

Published : 2011-04-13 20:26

Updated : 2024-11-21 01:25

NVD link : CVE-2011-1229

Mitre link : CVE-2011-1229

CVE.ORG link : CVE-2011-1229

JSON object : View

Products Affected

avaya

  • contact_center_express
  • visual_messenger
  • outbound_contact_management
  • vpnmanager_console
  • call_management_server_supervisor
  • web_messenger
  • customer_interaction_express
  • interaction_center
  • aura_conferencing_standard_edition
  • network_reporting
  • unified_messenger
  • octelaccess_server
  • enterprise_manager
  • basic_call_management_system_reporting_desktop
  • agent_access
  • ip_softphone
  • integrated_management
  • visual_vector_client
  • meeting_exchange
  • operational_analyst
  • octeldesigner
  • callvisor_asai_lan
  • computer_telephony
  • messaging_application_server
  • communication_server_1000_telephony_manager
  • callpilot
  • ip_agent
  • unified_communication_center
  • speech_access

microsoft

  • windows_2003_server
  • windows_server_2003
  • windows_server_2008
  • windows_vista
  • windows_7
  • windows_xp
CWE
CWE-476

NULL Pointer Dereference


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024