CVE

Id
53248  
CVE No.
CVE-2012-0005  
Status
Candidate  
Description
The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."  
Phase
Assigned (20111109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
562672 53248 CVE-2012-0005 MS:MS12-003  View
562673 53248 CVE-2012-0005 URL:http://technet.microsoft.com/security/bulletin/MS12-003  View
562674 53248 CVE-2012-0005 CERT:TA12-010A  View
562675 53248 CVE-2012-0005 URL:http://www.us-cert.gov/cas/techalerts/TA12-010A.html  View
562676 53248 CVE-2012-0005 BID:51270  View
562677 53248 CVE-2012-0005 URL:http://www.securityfocus.com/bid/51270  View
562678 53248 CVE-2012-0005 OVAL:oval:org.mitre.oval:def:14879  View
562679 53248 CVE-2012-0005 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14879  View
562680 53248 CVE-2012-0005 SECTRACK:1026495  View
562681 53248 CVE-2012-0005 URL:http://www.securitytracker.com/id?1026495  View
562682 53248 CVE-2012-0005 SECUNIA:47479  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25723 JVNDB-2012-001430 Microsoft Internet Explorer 6 から 9 におけるコンテンツを読まれる脆弱性 Microsoft Internet Explorer 6 から 9 は、コピー＆ペースト操作を適切に実行しないため、コンテンツを読まれる脆弱性が存在します。 CVE-2012-0010 53248 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001430.html  View