Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
BID:46136
Info
Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
| Bugtraq ID: | 46136 |
| Class: | Unknown |
| CVE: |
CVE-2011-0045 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 08 2011 12:00AM |
| Updated: | Mar 01 2011 02:49PM |
| Credit: | std_logic, working with TippingPoint's Zero Day Initiative |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Service Pack 3 0 Microsoft Windows XP Professional SP3 Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP3 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP3 Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5 Avaya Messaging Application Server 4 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Communication Server 1000 Telephony Manager 4.0 Avaya Communication Server 1000 Telephony Manager 3.0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya Aura Conferencing 6.0 Standard |
| Not Vulnerable: | |
Discussion
Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
Microsoft Windows is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a denial-of-service condition.
Microsoft Windows is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a denial-of-service condition.
Exploit / POC
Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
Microsoft Windows XP Media Center Edition SP3
Microsoft Windows XP Home SP3
Microsoft Windows XP Tablet PC Edition SP3
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
Microsoft Windows XP Media Center Edition SP3
-
Microsoft WindowsXP-KB2393802-x86-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A511D33A-9AE0 -46EE-A225-9D97390DE7D1
Microsoft Windows XP Home SP3
-
Microsoft WindowsXP-KB2393802-x86-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A511D33A-9AE0 -46EE-A225-9D97390DE7D1
Microsoft Windows XP Tablet PC Edition SP3
-
Microsoft WindowsXP-KB2393802-x86-ENU.exe
http://www.microsoft.com/downloads/details.aspx?familyid=A511D33A-9AE0 -46EE-A225-9D97390DE7D1
References
Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
References:
References:
- Microsoft Windows Homepage (Microsoft )
- MS11-011 Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2 (Avaya)
- ZDI-11-064: Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability (ZDI Disclosures
- Microsoft Security Bulletin MS11-011 (Microsoft)
- ZDI-11-064: Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability (Zero Day Initiative)