NVD

Id
8836  
Name
CVE-2011-1967  
Description
Winsrv.dll in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process device-event messages from low-integrity processes to high-integrity processes, which allows local users to gain privileges via a crafted application, aka "CSRSS Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-10  
Modified Date
2011-10-04  
Seq
2011-1967  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50972 8836 CVE-2011-1967 oval:org.mitre.oval:def:12911  View
50973 8836 CVE-2011-1967 MS11-063  View
50974 8836 CVE-2011-1967 TA11-221A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31894 JVNDB-2011-002134 Microsoft Windows の Win32 サブシステム内にある CSRSS の Winsrv.dll における権限昇格の脆弱性 Microsoft Windows の Win32 サブシステム内にある Client/Server Run-time Subsystem (CSRSS) の Winsrv.dll は、整合性レベルの低いプロセスから整合性レベルの高いプロセスへのデバイスイベントメッセージの送信について、パーミッションを適切にチェックしないため、権限を取得される脆弱性が存在します。 CVE-2011-1967 49874 CVE-2011-1967 8836 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002134.html 2011-08-09 2011-08-24 View