MS11-054: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2555917)

The remote host is running a version of the Windows kernel that is affected by the following vulnerabilities : - Multiple privilege escalation vulnerabilities exist due to the way that Windows kernel-mode drivers manage driver objects. CVE-2011-1874, CVE-2011-1875, CVE-2011-1876, CVE-2011-1877,...

Microsoft Windows CSRSS SrvWriteConsoleOutput Code Execution (MS11-056; CVE-2011-1284)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Remote attackers can exploit this vulnerability to run arbitrary code in kernel mode. The vulnerability is due to an integer overflow condition that could enable an attacker to execute code in the context of the system...

MS11-054: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: July 12, 2011

None None...

Microsoft Windows CSRSS winsrv NULL Pointer Code Execution (MS11-056; CVE-2011-1282)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation of this vulnerability may result in complete control of an attacker over an affected system...

Microsoft Windows CSRSS winsrv Integer Overflow Code Execution (MS11-056; CVE-2011-1870)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation of this vulnerability may result in complete control of an attacker over an affected system...

Microsoft Windows CSRSS ConsoleNumberOfCommand Code Execution (MS11-056; CVE-2011-1283)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Remote attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation may enable an attacker to install programs; view, change, or delete data; or create new accounts with full user...

Microsoft Windows CSRSS CONSOLE_ALLOC_MSG Code Execution (MS11-056; CVE-2011-1281)

An elevation of privilege vulnerability has been reported in Windows CSRSS. Attackers can exploit this vulnerability to run arbitrary code in kernel mode. Successful exploitation of this vulnerability may result in complete control of an attacker over an affected system...

Input validation

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType aka OTF fonts,...

CVE-2011-1873

The CVE-2011-1873 entry documents a remote code execution flaw in win32k.sys, affecting 64-bit Windows systems (XP SP2, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7 SP1) where OpenType font parsing allows crafted OTF files to execute code in kernel mode. Root cause: impr...

CVE-2011-1873

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType aka OTF fonts,...

PT-2011-3434 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP SP2 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold, SP2, R2, and R2 SP1 Windows 7 Gold and SP1 on 64-bit platforms Description: A remote code execution issue exists due to improper parsing of specially...

MS11-046: Vulnerability in Ancillary Function Driver Could Allow Elevation of Privilege (2503665)

The remote Windows host contains a version of the Ancillary Function Driver afd.sys that does not properly validate input before passing it from user mode to the kernel. An attacker with local access to the affected system could exploit this issue to execute arbitrary code in kernel mode and take...

MS11-041: Vulnerability in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2525694)

The remote host is running a version of the Windows kernel that is affected by a remote code execution vulnerability. An attacker can exploit this by causing a user to visit a network share containing a specially crafted OpenType font OTF. The attacker can exploit this issue to execute arbitrary...

MS11-041: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: June 14, 2011

None None...

Microsoft Windows 'win32k.sys' OpenType Font Parsing Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in the kernel-mode. Failed attempts will cause a denial-of-service condition. Technologies Affected Avaya Aura Conferencing 6.0 Standard Avaya...

Microsoft Windows ATMFD Font Driver OTF Code Execution (MS11-041; CVE-2011-1873)

The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling. A remote code execution vulnerability exists due to the way that the Windows kernel-mode...

CVE-2011-0677

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

CVE-2011-1233

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

CVE-2011-1237

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-1228

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...