win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
History

Thu, 17 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476
Metrics cvssV3_1

{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2011-04-13T20:07:00

Updated: 2024-10-17T19:28:55.745Z

Reserved: 2011-03-04T00:00:00

Link: CVE-2011-1231

cve-icon Vulnrichment

Updated: 2024-08-06T22:21:33.801Z

cve-icon NVD

Status : Modified

Published: 2011-04-13T20:26:25.330

Modified: 2024-11-21T01:25:51.103

Link: CVE-2011-1231

cve-icon Redhat

No data.