CVE-2009-1123

Опубликовано: 10 июн. 2009

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability."

Ссылки

http://osvdb.org/54940
Broken Link
http://secunia.com/advisories/35372
Broken Link
http://www.securitytracker.com/id?1022359
Broken Link
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-160A.html
Broken Link
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2009/1544
Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206
Broken Link
http://osvdb.org/54940
Broken Link
http://secunia.com/advisories/35372
Broken Link
http://www.securitytracker.com/id?1022359
Broken Link
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-160A.html
Broken Link
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2009/1544
Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206
Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1123

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:-:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:*:*

cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04295

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-gwqf-cc2p-xjrw

CVSS3: 7.8

github

почти 4 года назад

BDU:2022-07489

CVSS3: 8.2

fstec

больше 16 лет назад

Уязвимость ядра операционных систем Windows, позволяющая нарушителю повысить свои привилегии