CVE-2012-0005

2012-01-1021:00:00

microsoft

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

JSON

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka “CSRSS Elevation of Privilege Vulnerability.”