CVE

Id
49785  
CVE No.
CVE-2011-1873  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability."  
Phase
Assigned (20110504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
540440 49785 CVE-2011-1873 MS:MS11-041  View
540441 49785 CVE-2011-1873 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-041.mspx  View
540442 49785 CVE-2011-1873 BID:48183  View
540443 49785 CVE-2011-1873 URL:http://www.securityfocus.com/bid/48183  View
540444 49785 CVE-2011-1873 OVAL:oval:org.mitre.oval:def:12725  View
540445 49785 CVE-2011-1873 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12725  View
540446 49785 CVE-2011-1873 SECTRACK:1025638  View
540447 49785 CVE-2011-1873 URL:http://www.securitytracker.com/id?1025638  View
540448 49785 CVE-2011-1873 SECUNIA:44893  View
540449 49785 CVE-2011-1873 URL:http://secunia.com/advisories/44893  View
540450 49785 CVE-2011-1873 XF:ms-win-win32-otf-ce(67732)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31664 JVNDB-2011-001904 Microsoft Windows の win32k.sys における権限昇格の脆弱性 Microsoft Windows の kernel-mode ドライバ内にある win32k.sys は、ドライバオブジェクトに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2011-1878 49785 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001904.html  View