NVD

Id
8750  
Name
CVE-2011-1870  
Description
Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutputString Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-07-13  
Modified Date
2011-10-04  
Seq
2011-1870  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50460 8750 CVE-2011-1870 oval:org.mitre.oval:def:12889  View
50461 8750 CVE-2011-1870 MS11-056  View
50462 8750 CVE-2011-1870 48605  View
50463 8750 CVE-2011-1870 TA11-193A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31681 JVNDB-2011-001921 Microsoft Windows の CSRSS における権限昇格またはサービス運用妨害 (メモリ破損) の脆弱性 Microsoft Windows の Client/Server Run-time Subsystem (CSRSS) は、整数オーバーフローにより、権限を取得される、またはサービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-1870 49777 CVE-2011-1870 8750 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001921.html 2011-07-12 2011-07-25 View