| ID |
CVE-2012-2553
|
| Summary |
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability." |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
-
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
|
| CVSS |
| Base: | 7.2 (as of 30-10-2018 - 16:27) |
| Impact: | |
| Exploitability: | |
|
| CWE |
CWE-399 |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| LOCAL |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
| msbulletin
via4
|
| bulletin_id | MS12-075 | | bulletin_url | | | date | 2012-11-13T00:00:00 | | impact | Remote Code Execution | | knowledgebase_id | 2761226 | | knowledgebase_url | | | severity | Critical | | title | Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution |
|
| oval
via4
|
| accepted | 2013-05-06T04:01:41.418-04:00 | | class | vulnerability | | contributors | | name | SecPod Team | | organization | SecPod Technologies |
| name | Sharath S | | organization | SecPod Technologies |
| | definition_extensions | | comment | Microsoft Windows XP (x86) SP3 is installed | | oval | oval:org.mitre.oval:def:5631 |
| comment | Microsoft Windows Server 2003 SP2 (x86) is installed | | oval | oval:org.mitre.oval:def:1935 |
| comment | Microsoft Windows Vista (32-bit) Service Pack 2 is installed | | oval | oval:org.mitre.oval:def:6124 |
| comment | Microsoft Windows Server 2008 (32-bit) Service Pack 2 is installed | | oval | oval:org.mitre.oval:def:5653 |
| comment | Microsoft Windows 7 (32-bit) is installed | | oval | oval:org.mitre.oval:def:6165 |
| comment | Microsoft Windows 7 (32-bit) Service Pack 1 is installed | | oval | oval:org.mitre.oval:def:12292 |
| | description | Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application, aka "Win32k Use After Free Vulnerability." | | family | windows | | id | oval:org.mitre.oval:def:15817 | | status | accepted | | submitted | 2012-11-16T11:27:12 | | title | Win32k Use After Free Vulnerability - MS12-075 | | version | 77 |
|
| refmap
via4
|
| bid | 56448 | | cert | TA12-318A | | sectrack | 1027750 | | secunia | 51239 |
|
| Last major update |
30-10-2018 - 16:27 |
| Published |
14-11-2012 - 00:55 |
| Last modified |
30-10-2018 - 16:27 |
