Lucene search
MicrosoftCVE-2012-2527HistoryAug 15, 2012 - 1:55 a.m.
CVE-2012-2527
2012-08-1501:55:01
CWE-399
microsoft
web.nvd.nist.gov
38
cve-2012-2527
win32k
use after free
vulnerability
microsoft windows
nvd
security
update
privilege escalation
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
20.7%
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka “Win32k Use After Free Vulnerability.”
Affected configurations
Node
microsoftwindows_7x64
ORmicrosoftwindows_7x86
ORmicrosoftwindows_7sp1x64
ORmicrosoftwindows_7sp1x86
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008r2itanium
ORmicrosoftwindows_server_2008r2x64
ORmicrosoftwindows_server_2008sp2itanium
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008sp2x86
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2x64
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:* |
| microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:*:x86:*:*:*:*:* |
| microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:* |
| microsoft | windows_7 | * | cpe:2.3:o:microsoft:windows_7:*:sp1:x86:*:*:*:*:* |
| microsoft | windows_server_2003 | * | cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:* |
| microsoft | windows_server_2008 | * | cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-2527
2012-08-15 01:00:00
seebug
seebug
Microsoft Windows 本地权限提升漏洞(CVE-2012-2527)
2012-08-18 00:00:00
openvas
openvas
prion
prion
Design/Logic Flaw
2012-08-15 01:55:00
nvd
nvd
CVE-2012-2527
2012-08-15 01:55:01
symantec
symantec
Microsoft Windows CVE-2012-2527 Local Privilege Escalation Vulnerability
2012-08-14 00:00:00
nessus
nessus
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2012-08-20 00:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
Low
EPSS
0.001
Percentile
20.7%
Related for CVE-2012-2527