Lucene search

K
cve[email protected]CVE-2009-1124
HistoryJun 10, 2009 - 6:30 p.m.

CVE-2009-1124

2009-06-1018:30:00
CWE-20
web.nvd.nist.gov
24
windows
kernel
pointer validation
microsoft
security
vulnerability
cve-2009-1124

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka β€œWindows Kernel Pointer Validation Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_2000sp4
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_server_2008sp2itanium
OR
microsoftwindows_server_2008Matchsp2x32
OR
microsoftwindows_server_2008Matchsp2x64
OR
microsoftwindows_vistax64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatchgold
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp3

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%