Privilege escalation

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout...

CVE-2010-0023

The Client/Server Run-time Subsystem CSRSS in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout...

CVE-2010-0023

CVE-2010-0023 affects the Client/Server Runtime Subsystem (CSRSS) on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The vulnerability stems from CSRSS not properly terminating processes after user logout, enabling a local attacker to gain privileges or access sensitive information via a craft...

Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability (978037)

This host is missing a critical security update according to Microsoft Bulletin MS10-011. OpenVAS Vulnerability Test $Id: secpodms10-011.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Client/Server Run-time Subsystem Privilege Elevation Vulnerability 978037 Authors: Antu Sanadi Copyright: Copyrig...

Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (978037)

Microsoft Security Bulletin MS10-011 - Important Vulnerability in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege 978037 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in...

Microsoft Windows Client/Server Run-time Subsystem Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability in the Client/Server Run-time Subsystem CSRSS. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits may result in the complete compromise of affected...

Microsoft Windows CSRSS MSGBox远程代码执行漏洞

Microsoft Windows是一款商业性质的操作系统。 Microsoft Windows客户端/服务端实时子系统处理存在问题，远程攻击者可以利用漏洞以系统进程权限执行任意指令。 由于CSRSS服务处理错误消息存在问题，攻击者通过构建特殊的应用程序来触发此漏洞，可导致以系统进程权限执行任意指令。目前没有详细漏洞细节提供。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microso...

Microsoft Windows CSRSS HardError消息拒绝服务漏洞

Microsoft Windows是一款商业性质的操作系统。 Microsoft Windows客户端/服务端实时子系统处理错误消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 攻击者通过构建特殊的应用程序来触发此漏洞，可导致对应用程序进行拒绝服务攻击。目前没有详细漏洞细节提供。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP...

Microsoft Security Bulletin MS07-021 Vulnerabilities in CSRSS Could Allow Remote Code Execution (930178)

Microsoft Security Bulletin MS07-021 Vulnerabilities in CSRSS Could Allow Remote Code Execution 930178 Published: April 10, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...

Microsoft Windows memory corruption

CSRSS memory corruption on MessageBox with MBSERVICENOTIFICATION beginning with "??"...

EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation

Windows Vista CSRSS Dangling Process Pointer Privilege Escalation Release Date: April 10, 2007 Date Reported: January 19, 2007 Severity: Medium Local Privilege Escalation to SYSTEM Vendor: Microsoft Systems Affected: Windows Vista Overview: eEye Digital Security has discovered a local privilege...

CVE-2007-1209

CVE-2007-1209 is a local privilege-escalation vulnerability in the Windows CSRSS subsystem (Vista) caused by improper marshaling of system resources during process startup/shutdown, allowing a locally authenticated user to gain elevated privileges by manipulating ApiPort connections. Public refer...

Microsoft Windows CSRSS MSGBox Remote Code Execution Vulnerability

Description Microsoft Windows CSRSS client/server run-time subsystem MsgBox is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Note that this issue can also be exploited locally by an authenticated user to...

Microsoft Windows Vista CSRSS privilege escalation vulnerability

Overview The Microsoft Windows Client/Server Run-time Subsystem CSRSS process fails to properly handle error messages. This vulnerability may allow an attacker to execute arbitrary code. Description The Microsoft Client/Server Run-time Subsystem CSRSS is an essential subsystem. CSRSS is responsib...

Microsoft Windows CSRSS error handling vulnerability

Overview The Microsoft Windows Client/Server Run-time Subsystem CSRSS process fails to properly handle error messages. This vulnerability may allow a remote attacker to execute arbitrary code. Description According to Microsoft Security Bulletin MS07-021:CSRSS is the user-mode portion of the Win3...

Microsoft Windows Csrss HardError 消息多个安全漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows处理特殊参数的部分API调用时存在问题，本地攻击者可以利用漏洞获得敏感信息或对系统进行拒绝服务攻击。 Microsoft Windows的WINSRV.DLL在处理HardError消息时存在两次释放错误。攻击者如果把MessageBox函数的caption或text参数设置为以“??\”开始的字符串，那么畸形的参数会触发内核内存破坏，导致系统崩溃。 另外CSRSS.exe没有正确的验证由NtRaiseHardError传送的参数，可允许攻击者浏览CSRSS进程内存的内容，导致敏感信息泄露。...

Microsoft Vista - NtRaiseHardError Local Privilege Escalation

Microsoft Vista - NtRaiseHardError Local Privilege Escalation //raise.c //26-12-2006 erasmus/ORC //exploit NtRaiseHardError privesc and load dll into csrss //this version only is vista, other version can be worked //with proper offsets, i will complete them soon //imperfect but sometime work, ok...

Microsoft Vista (NtRaiseHardError) Privilege Escalation Exploit

No description provided by source. //raise.c //26-12-2006 erasmus/ORC //exploit NtRaiseHardError privesc and load dll into csrss //this version only is vista, other version can be worked //with proper offsets, i will complete them soon //imperfect but sometime work, ok for proto type; //dll limit...

Microsoft Vista - 'NtRaiseHardError' Local Privilege Escalation

//raise.c //26-12-2006 erasmus/ORC //exploit NtRaiseHardError privesc and load dll into csrss //this version only is vista, other version can be worked //with proper offsets, i will complete them soon //imperfect but sometime work, ok for proto type; //dll limit to 8 chars but maybe can work arou...

Microsoft Vista (NtRaiseHardError) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits =============================================================== Microsoft Vista NtRaiseHardError Privilege Escalation Exploit =============================================================== //raise.c //26-12-2006 erasmus/ORC //exploit...