CVE

Id
40088  
CVE No.
CVE-2009-2653  
Status
Candidate  
Description
** DISPUTED ** The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite of an arbitrary memory location. NOTE: the vendor disputes the significance of this report, stating that "the Administrator to SYSTEM "escalation" is not a security boundary we defend."  
Phase
Assigned (20090803)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
440193 40088 CVE-2009-2653 MILW0RM:9301  View
440194 40088 CVE-2009-2653 URL:http://www.milw0rm.com/exploits/9301  View
440195 40088 CVE-2009-2653 MISC:http://blogs.technet.com/srd/archive/2009/06/11/latest-baidu-public-posting-requires-adminisrator-to-elevate.aspx  View
440196 40088 CVE-2009-2653 MISC:http://hi.baidu.com/azy0922/blog/item/f950cbc2890729130ef47783.html  View
440197 40088 CVE-2009-2653 MISC:http://www.ntinternals.org/index.html#09_07_30  View
440198 40088 CVE-2009-2653 OSVDB:56780  View
440199 40088 CVE-2009-2653 URL:http://osvdb.org/56780  View
440200 40088 CVE-2009-2653 SECTRACK:1022630  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43844 JVNDB-2009-004851 nilfs-utils における任意のコマンドを実行される脆弱性 nilfs-utils は、setuid 権限が不要な複数のアプリケーションをインストールするため、任意のコマンドを実行される脆弱性が存在します。 CVE-2009-2657 40088 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004851.html  View