NetSight
high7.2

CVE-2009-1124

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode p…

Impact

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointer Validation Vulnerability."

Affected products

VendorProductAffected versions
MicrosoftWindows 2000
All versions
MicrosoftWindows Server 2003
All versions
MicrosoftWindows Server 2008
All versions
Version sp2
MicrosoftWindows Vista
All versions
Version gold
MicrosoftWindows Xp
All versions

Weakness classification

References