Windows CSRSS子系统AllocConsole()本地权限提升漏洞(CVE-2011-1281)(MS11-056)

BUGTRAQ ID: 48588 CVE ID: CVE-2011-1281 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统在AllocConsole的实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于在多个控制台对象关联到一个进程时，CSRSS子系统的"AllocConsole"函数实现上存在问题，造成在原始进程终止后，新进程获取孤立对象。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 200...

MS11-056: Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938)

The remote host allows elevation of privileges in its Windows Client/Server run-time subsystem CSRSS. An attacker could exploit these vulnerabilities to run arbitrary code in kernel mode. The attacker must have valid login credentials and be able to log on locally in order to exploit these...