CVE

Id
53400  
CVE No.
CVE-2012-0157  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle window messaging, which allows local users to gain privileges via a crafted application that calls the PostMessage function, aka "PostMessage Function Vulnerability."  
Phase
Assigned (20111213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
564021 53400 CVE-2012-0157 MS:MS12-018  View
564022 53400 CVE-2012-0157 URL:http://technet.microsoft.com/security/bulletin/MS12-018  View
564023 53400 CVE-2012-0157 CERT:TA12-073A  View
564024 53400 CVE-2012-0157 URL:http://www.us-cert.gov/cas/techalerts/TA12-073A.html  View
564025 53400 CVE-2012-0157 OVAL:oval:org.mitre.oval:def:14217  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26653 JVNDB-2012-002360 Microsoft .NET Framework 4 における任意のコードを実行される脆弱性 Microsoft .NET Framework 4 は、バッファを適切に割り当てないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-0162 53400 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002360.html  View