CVE

Id
48589  
CVE No.
CVE-2011-0677  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."  
Phase
Assigned (20110128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528040 48589 CVE-2011-0677 MISC:http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx  View
528041 48589 CVE-2011-0677 CONFIRM:http://support.avaya.com/css/P8/documents/100133352  View
528042 48589 CVE-2011-0677 MS:MS11-034  View
528043 48589 CVE-2011-0677 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-034.mspx  View
528044 48589 CVE-2011-0677 CERT:TA11-102A  View
528045 48589 CVE-2011-0677 URL:http://www.us-cert.gov/cas/techalerts/TA11-102A.html  View
528046 48589 CVE-2011-0677 BID:47224  View
528047 48589 CVE-2011-0677 URL:http://www.securityfocus.com/bid/47224  View
528048 48589 CVE-2011-0677 OVAL:oval:org.mitre.oval:def:12653  View
528049 48589 CVE-2011-0677 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12653  View
528050 48589 CVE-2011-0677 SECTRACK:1025345  View
528051 48589 CVE-2011-0677 URL:http://www.securitytracker.com/id?1025345  View
528052 48589 CVE-2011-0677 SECUNIA:44156  View
528053 48589 CVE-2011-0677 URL:http://secunia.com/advisories/44156  View
528054 48589 CVE-2011-0677 VUPEN:ADV-2011-0952  View
528055 48589 CVE-2011-0677 URL:http://www.vupen.com/english/advisories/2011/0952  View
528056 48589 CVE-2011-0677 XF:mswin-win32k-var12-priv-escalation(66406)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33960 JVNDB-2011-004202 Opera の opera.dll における整数切り捨て問題の脆弱性 Opera の opera.dll は、任意のコードを実行される、サービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-0682 48589 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004202.html  View