NVD

Id
10055  
Name
CVE-2011-3408  
Description
Csrsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Local Privilege Elevation Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-12-13  
Modified Date
2013-01-29  
Seq
2011-3408  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57698 10055 CVE-2011-3408 oval:org.mitre.oval:def:14598  View
57699 10055 CVE-2011-3408 MS11-097  View
57700 10055 CVE-2011-3408 TA11-347A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33124 JVNDB-2011-003364 Microsoft Windows における権限昇格の脆弱性 Microsoft Windows の Win32 サブシステムにある Client/Server Run-time Subsystem の Csrsrv.dll は、low-integrity プロセスから high-integrity プロセスへの inter-process device-event メッセージ送信についてのアクセス権限を適切にチェックしないため、権限を取得される脆弱性が存在します。 CVE-2011-3408 51315 CVE-2011-3408 10055 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003364.html 2011-12-13 2011-12-22 View