NVD

Id
7182  
Name
CVE-2011-0045  
Description
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-02-08  
Modified Date
2011-09-21  
Seq
2011-0045  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
40260 7182 CVE-2011-0045 oval:org.mitre.oval:def:11996  View
40261 7182 CVE-2011-0045 8110  View
40262 7182 CVE-2011-0045 http://support.avaya.com/css/P8/documents/100127248  View
40263 7182 CVE-2011-0045 MS11-011  View
40264 7182 CVE-2011-0045 20110208 ZDI-11-064: Microsoft Windows WmiTraceMessageVa Local Kernel Vulnerability  View
40265 7182 CVE-2011-0045 46136  View
40266 7182 CVE-2011-0045 1025046  View
40267 7182 CVE-2011-0045 ADV-2011-0324  View
40268 7182 CVE-2011-0045 http://www.zerodayinitiative.com/advisories/ZDI-11-064  View
40269 7182 CVE-2011-0045 ms-win-kernel-privilege-escalation(64926)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30928 JVNDB-2011-001167 Microsoft Windows XP の Trace Events 機能における権限昇格の脆弱性 Microsoft Windows XP の kernel 内にある Trace Events 機能には、WmiTraceMessageVa 関数の処理に不備があり、型変換を適切に実行しないため、整数トランケーションおよび不十分なメモリの割り当てを引き起こし、バッファーオーバーフローを誘発され、権限を取得される脆弱性が存在します。 CVE-2011-0045 47952 CVE-2011-0045 7182 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001167.html 2011-02-08 2011-03-07 View