Privilege escalation

The Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which...

CVE-2012-0005

CVE-2012-0005 affects Microsoft Windows CSRSS in the Win32 subsystem (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2). The issue arises when processing Unicode characters for Chinese/Japanese/Korean locales, leading to uninitialized memory access and local privilege escalation. Exploitat...

CVE-2012-0005

The Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which...

Microsoft Windows multiple security vulnerabilities

Buffer overflow on TTF fonts parsing, OLE objects memory corruption, CSRSS and kernel privilege escalations, ActiveX code execution...

Microsoft Windows CSRSS本地权限提升漏洞(MS11-097)

BUGTRAQ ID: 50972 CVE ID: CVE-2011-3408 csrss.exe系统进程是微软客户端、服务端运行时子系统，管理Windows图形相关任务。 Microsoft Windows CSRSS在实现上存在本地权限提升漏洞，成功利用后可允许本地攻击者以管理员权限执行任意代码。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Microsoft Windows 7 厂商补丁： Microsoft...

CVE-2011-3408

CVE-2011-3408 describes a local privilege-escalation vulnerability in the Windows Client/Server Run-time Subsystem (CSRSS). Csrsrv.dll in CSRSS fails to properly check permissions when a lower-integrity process sends inter-process device-event messages to a higher-integrity process, allowing a lo...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)

This host is missing an important security update according to Microsoft Bulletin MS11-097. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS11-097: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2620712)

The Windows Client/Server Run-time Subsystem CSRSS on the remote host has a privilege escalation vulnerability. Permissions are not properly validated when a lower-integrity process communicates a device event to a higher-integrity process. A local attacker could exploit this vulnerability to gai...

Microsoft Windows CSRSS DoS

NULL pointer dereference on console input from stdin if stderr and stdout are closed...

Microsoft Windows Server 2008 R1 - Local Denial of Service

Microsoft Windows Server 2008 R1 - Local Denial of Service Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of t...

Microsoft Windows Client/Server Run-time Subsystem Privilege Escalation Vulnerability (2567680)

This host is missing a critical security update according to Microsoft Bulletin MS11-063. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1967

CVE-2011-1967 affects the Windows Client/Server Run-time Subsystem (CSRSS) via the Winsrv.dll component. The root cause is improper permission checks when a lower‑integrity process sends inter‑process device‑event messages to a higher‑integrity CSRSS, enabling local privilege escalation. Affected...

CVE-2011-1967

Winsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...

Microsoft Windows multiple security vulnerabilities

NDISTAPI service and CSRSS privilege escalations, kernel DoS, TCP/IP DoS, RDP DoS, .Net information disclosure...

Microsoft Windows CSRSS SrvDeviceEvent Code Execution (MS11-063; CVE-2011-1967)

A code execution vulnerability has been reported in Windows CSRSS. The vulnerability is due to a CSRSS memory assignment issue. An attacker can exploit this vulnerability by convincing an unsuspecting user to open a malicious executable file. Successful exploitation of this vulnerability may enab...

Microsoft Windows CSRSS "SrvGetConsoleTitle()"本地类型转换安全漏洞

BUGTRAQ ID: 49013 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统在SrvGetConsoleTitle的实现上存在本地模式化安全漏洞，本地攻击者可利用此漏洞造成拒绝服务或获取敏感信息。 此漏洞源于在执行某些尺寸检查时，CSRSS中的"SrvGetConsoleTitle"函数winsrv.dll存在类型转换错误。这可导致泄漏某些CSRSS内存或引用无效内存，造成内核崩溃。 Microsoft Windows XP 厂商补丁： Microsoft ---------...

Windows CSRSS子系统SrvSetConsoleLocalEUDC权限提升漏洞(CVE-2011-1282)(MS11-056)

BUGTRAQ ID: 48598 CVE ID: CVE-2011-1282 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的CSRSS子系统在SrvSetConsoleLocalEUDC的实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvSetConsoleLocalEUDC函数存在输入验证错误，可被利用将某些数据写入到空页。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008...

Windows CSRSS子系统SrvSetConsoleNumberOfCommand权限提升漏洞(CVE-2011-1283)(MS11-056)

BUGTRAQ ID: 48604 CVE ID: CVE-2011-1283 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统的SrvSetConsoleNumberOfCommand实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvSetConsoleNumberOfCommand函数中的数组索引错误，可被利用从某些内核内存位置读取数据。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows...

Windows CSRSS子系统SrvWriteConsoleOutputString权限提升漏洞(CVE-2011-1870)(MS11-056)

BUGTRAQ ID: 48605 CVE ID: CVE-2011-1870 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统SrvWriteConsoleOutputString实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvWriteConsoleOutputString存在整数溢出漏洞，可造成内存破坏。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008...

Windows CSRSS子系统AllocConsole()本地权限提升漏洞(CVE-2011-1281)(MS11-056)

BUGTRAQ ID: 48588 CVE ID: CVE-2011-1281 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统在AllocConsole的实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于在多个控制台对象关联到一个进程时，CSRSS子系统的"AllocConsole"函数实现上存在问题，造成在原始进程终止后，新进程获取孤立对象。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 200...