MS11-056: Vulnerabilities in Windows CSRSS could allow elevation of privilege: July 12, 2011

None None...

Microsoft Windows CSRSS winsrv Integer Overflow Code Execution (MS11-056; CVE-2011-1870)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation of this vulnerability may result in complete control of an attacker over an affected system...

Microsoft Windows CSRSS ConsoleNumberOfCommand Code Execution (MS11-056; CVE-2011-1283)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Remote attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation may enable an attacker to install programs; view, change, or delete data; or create new accounts with full user...

Microsoft Windows CSRSS winsrv NULL Pointer Code Execution (MS11-056; CVE-2011-1282)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation of this vulnerability may result in complete control of an attacker over an affected system...

Microsoft Windows CSRSS CONSOLE_ALLOC_MSG Code Execution (MS11-056; CVE-2011-1281)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation of this vulnerability may result in complete control of an attacker over an affected system...

Microsoft Windows CSRSS LPC_PORT_CLOSED Information Disclosure (MS11-010; CVE-2011-0030)

The Client/Server Run-time Subsystem CSRSS is the user-mode portion of the Win32 subsystem. CSRSS is an essential subsystem that must be running at all times. CSRSS is responsible for console windows, and creating and/or deleting threads. An elevation of privilege vulnerability has been reported ...

CVE-2011-0030

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout...

Privilege escalation

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout...

CVE-2011-0030

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2476687)

This host is missing a critical security update according to Microsoft Bulletin MS11-010. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-0030

CVE-2011-0030 describes a CSRSS Elevation of Privilege vulnerability in Windows XP SP2/SP3 and Windows Server 2003 SP2. The Client/Server Run-time Subsystem (CSRSS) does not properly terminate processes after a user logs out, allowing a local attacker to keep a crafted process running into the ne...

MS11-010: Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2476687)

The remote host allows elevation of privileges in its Windows Client/Server run-time subsystem CSRSS because it may be possible to create a specially crafted application that continues to run after the attacker logs off. An attacker might exploit this to run arbitrary code in kernel mode. C Tenab...

Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)

This host is missing a critical security update according to Microsoft Bulletin MS07-021. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability (930178)

This host is missing a critical security update according to Microsoft Bulletin MS07-021. OpenVAS Vulnerability Test $Id: gbms07-021.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows CSRSS CSRFinalizeContext Local Privilege Escalation Vulnerability 930178 Authors: Madhuri D Copyright:...

Microsoft Windows multiple security vulnerabilities

Privilege escalation and code execution in spooler services,memory corruption in MPEG-4 codec, memroy corruption in RPC, privilege escalation in LSA, privilege escalation in CSRSS subsystem, WordPad memory corruption...

CVE-2010-1891

CVE-2010-1891 affects the Windows Client/Server Runtime Subsystem (CSRSS) in the Win32 subsystem on Windows XP SP2/SP3 and Windows Server 2003 SP2. The vulnerability stems from improper memory allocation for transactions when Chinese, Japanese, or Korean locales are enabled, allowing local users ...

MS10-069: Vulnerability in Windows Client/Server Runtime Subsystem Could Allow Elevation of Privilege (2121546)

The remote host allows elevation of privileges in its Windows Client/Server run-time subsystem CSRSS because of the way CSRSS assigns memory-specific user transactions. An attacker might exploit this to run arbitrary code in the security context of the local system. C Tenable Network Security, In...

Microsoft Windows CSRSS HardError Message Box (MS07-021; CVE-2006-6696)

The Microsoft Windows operating system is one of the most popular systems in use on workstations, home computers, and servers. The operating system is split into several subsystems one of which is the user space subsystem called the Client/Server Runtime Server Subsystem CSRSS. The CSRSS contains...

Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）

BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...

CVE-2010-0023

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout...