Microsoft Windows Win32k CVE-2019-0797 Local Privilege Escalation Vulnerability
BID:107330
Info
Microsoft Windows Win32k CVE-2019-0797 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 107330 |
| Class: | Design Error |
| CVE: |
CVE-2019-0797 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 12 2019 12:00AM |
| Updated: | Mar 12 2019 12:00AM |
| Credit: | (Vasily Berdnikov) of Kaspersky Lab (Boris Larin) of Kaspersky Lab |
| Vulnerable: |
Microsoft Windows Server 2019 0 Microsoft Windows Server 2016 0 Microsoft Windows Server 2012 R2 0 Microsoft Windows Server 2012 0 Microsoft Windows Server 1803 0 Microsoft Windows Server 1709 0 Microsoft Windows RT 8.1 Microsoft Windows 8.1 for x64-based Systems 0 Microsoft Windows 8.1 for 32-bit Systems 0 Microsoft Windows 10 Version 1809 for x64-based Systems 0 Microsoft Windows 10 Version 1809 for ARM64-based Systems 0 Microsoft Windows 10 Version 1809 for 32-bit Systems 0 Microsoft Windows 10 Version 1803 for x64-based Systems 0 Microsoft Windows 10 Version 1803 for ARM64-based Systems 0 Microsoft Windows 10 Version 1803 for 32-bit Systems 0 Microsoft Windows 10 version 1709 for x64-based Systems 0 Microsoft Windows 10 Version 1709 for ARM64-based Systems 0 Microsoft Windows 10 version 1709 for 32-bit Systems 0 Microsoft Windows 10 version 1703 for x64-based Systems 0 Microsoft Windows 10 version 1703 for 32-bit Systems 0 Microsoft Windows 10 Version 1607 for x64-based Systems 0 Microsoft Windows 10 Version 1607 for 32-bit Systems 0 Microsoft Windows 10 for x64-based Systems 0 Microsoft Windows 10 for 32-bit Systems 0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows Win32k CVE-2019-0797 Local Privilege Escalation Vulnerability
Microsoft Windows is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial of service condition.
Microsoft Windows is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary code with elevated privileges. Failed exploit attempts may result in a denial of service condition.
Exploit / POC
Microsoft Windows Win32k CVE-2019-0797 Local Privilege Escalation Vulnerability
Reports indicate that this issue is being exploited in the wild. Please see the references for more information.
Reports indicate that this issue is being exploited in the wild. Please see the references for more information.
Solution / Fix
Microsoft Windows Win32k CVE-2019-0797 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft Windows Win32k CVE-2019-0797 Local Privilege Escalation Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- CVE-2019-0797 | Win32k Elevation of Privilege Vulnerability (Microsoft)