CVE-2012-0178

2012-05-0900:55:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2012-0178

windows partition manager

race condition

privilege escalation

plug and play configuration manager

vulnerability

6.5 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

8.7%

JSON

Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka “Plug and Play (PnP) Configuration Manager Vulnerability.”

CPENameOperatorVersion
microsoft:windows_server_2008microsoft windows server 2008eq*
microsoft:windows_server_2008microsoft windows server 2008eqr2
microsoft:windows_7microsoft windows 7eq-
microsoft:windows_vistamicrosoft windows vistaeq*
microsoft:windows_7microsoft windows 7eq*
microsoft:windows_vistamicrosoft windows vistaeqsp2
microsoft:windows_server_2008microsoft windows server 2008eq-

CPE	Name	Operator	Version
microsoft:windows_server_2008	microsoft windows server 2008	eq	*
microsoft:windows_server_2008	microsoft windows server 2008	eq	r2
microsoft:windows_7	microsoft windows 7	eq	-
microsoft:windows_vista	microsoft windows vista	eq	*
microsoft:windows_7	microsoft windows 7	eq	*
microsoft:windows_vista	microsoft windows vista	eq	sp2
microsoft:windows_server_2008	microsoft windows server 2008	eq	-