Windows CSRSS子系统SrvSetConsoleNumberOfCommand权限提升漏洞(CVE-2011-1283)(MS11-056)

BUGTRAQ ID: 48604 CVE ID: CVE-2011-1283 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统的SrvSetConsoleNumberOfCommand实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvSetConsoleNumberOfCommand函数中的数组索引错误，可被利用从某些内核内存位置读取数据。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows...

CVE-2011-1283: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 does not ensure that an unspecified array index has a non-negative value before performing read and...