CVE

Id
49798  
CVE No.
CVE-2011-1886  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 does not properly validate the arguments to functions, which allows local users to read arbitrary data from kernel memory via a crafted application that triggers a NULL pointer dereference, aka "Win32k Incorrect Parameter Validation Allows Information Disclosure Vulnerability."  
Phase
Assigned (20110504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
540619 49798 CVE-2011-1886 CONFIRM:http://support.avaya.com/css/P8/documents/100144947  View
540620 49798 CVE-2011-1886 MS:MS11-054  View
540621 49798 CVE-2011-1886 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-054.mspx  View
540622 49798 CVE-2011-1886 CERT:TA11-193A  View
540623 49798 CVE-2011-1886 URL:http://www.us-cert.gov/cas/techalerts/TA11-193A.html  View
540624 49798 CVE-2011-1886 BID:48607  View
540625 49798 CVE-2011-1886 URL:http://www.securityfocus.com/bid/48607  View
540626 49798 CVE-2011-1886 OSVDB:73791  View
540627 49798 CVE-2011-1886 URL:http://osvdb.org/73791  View
540628 49798 CVE-2011-1886 OVAL:oval:org.mitre.oval:def:12778  View
540629 49798 CVE-2011-1886 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12778  View
540630 49798 CVE-2011-1886 SECTRACK:1025761  View
540631 49798 CVE-2011-1886 URL:http://www.securitytracker.com/id?1025761  View
540632 49798 CVE-2011-1886 SECUNIA:45186  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
32191 JVNDB-2011-002431 Microsoft Windows SharePoint Services および SharePoint Foundation におけるクロスサイトスクリプティングの脆弱性 Microsoft Windows SharePoint Services および SharePoint Foundation には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-1891 49798 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002431.html  View