CVE

Id
53423  
CVE No.
CVE-2012-0180  
Status
Candidate  
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly handle user-mode input passed to kernel mode for (1) windows and (2) messages, which allows local users to gain privileges via a crafted application, aka "Windows and Messages Vulnerability."  
Phase
Assigned (20111213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
564252 53423 CVE-2012-0180 MS:MS12-034  View
564253 53423 CVE-2012-0180 URL:http://technet.microsoft.com/security/bulletin/MS12-034  View
564254 53423 CVE-2012-0180 CERT:TA12-129A  View
564255 53423 CVE-2012-0180 URL:http://www.us-cert.gov/cas/techalerts/TA12-129A.html  View
564256 53423 CVE-2012-0180 OVAL:oval:org.mitre.oval:def:15466  View
564257 53423 CVE-2012-0180 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:15466  View
564258 53423 CVE-2012-0180 SECTRACK:1027039  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26646 JVNDB-2012-002353 Microsoft Excel および Microsoft Office におけるヒープベースのバッファオーバーフローの脆弱性 Microsoft Excel および Microsoft Office には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-0185 53423 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002353.html  View