Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-1865 State: PUBLISHED Published: 2011-07-01T10:00:00 Last Updated: 2024-08-06T22:45:58.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025731 - http://www.exploit-db.com/exploits/17467 - http://www.securityfocus.com/bid/48486 - http://securityreason.com/securityalert/8291 - http://www.exploit-db.com/exploits/17468 - http://securityreason.com/securityalert/8288
reason.com/securityalert/8291 - http://www.exploit-db.com/exploits/17468 - http://securityreason.com/securityalert/8288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68281 - http://www.exploit-db.com/exploits/17490 - http://www.exploit-db.com/exploits/17458 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182 - http://secunia.com/advisories/45100 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182 - http://securityreason.com/securityalert/8295 - http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities - http://securityreason.com/securityalert/8290
CVE ID: CVE-2011-1866 State: PUBLISHED Published: 2011-07-01T10:00:00 Last Updated: 2024-08-06T22:46:00.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1025731 - http://www.exploit-db.com/exploits/17461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68297 - http://securityreason.com/securityalert/8289 - http://www.coresecurity.com/content/HP-Data-Protector-EX
bilities/68297 - http://securityreason.com/securityalert/8289 - http://www.coresecurity.com/content/HP-Data-Protector-EXECCMD-Vulnerability - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182 - http://secunia.com/advisories/45100 - http://www.securityfocus.com/bid/48488 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182 - http://www.securityfocus.com/archive/1/518666/100/0/threaded
CVE ID: CVE-2011-1867 State: PUBLISHED Published: 2011-07-11T20:00:00 Last Updated: 2024-08-06T22:45:59.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager (UAM) 5.0 before SP1 E0101P03 and Endpoint Admission Defense (EAD) 5.0 before SP1 E0101P03 components in HP Intelligent Management Center (aka iNode Management Center) allows remote attackers to execute arbitrary code via a 0x0A0BF007 packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-11-232/ - http://www.securityfocus.com/bid/48527 - http://www.osvdb.org/73597 - http://securitytra
ve.com/advisories/ZDI-11-232/ - http://www.securityfocus.com/bid/48527 - http://www.osvdb.org/73597 - http://securitytracker.com/id?1025740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/68348 - http://marc.info/?l=bugtraq&m=130982758604404&w=2 - http://marc.info/?l=bugtraq&m=130982758604404&w=2 - http://secunia.com/advisories/45129 - http://securityreason.com/securityalert/8302 - http://www.securityfocus.com/archive/1/518691/100/0/threaded
CVE ID: CVE-2011-1868 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:46:00.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate fields in DFS responses, which allows remote DFS servers to execute arbitrary code via a crafted response, aka "DFS Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/67726 - http://www.securityfocus.com/bid/48180 - http://www.securitytracker.com/id?1025639 - https://docs.microsoft.com/en-us/securi
://www.securityfocus.com/bid/48180 - http://www.securitytracker.com/id?1025639 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11758 - http://secunia.com/advisories/44894
CVE ID: CVE-2011-1869 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:45:59.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Distributed File System (DFS) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote DFS servers to cause a denial of service (system hang) via a crafted referral response, aka "DFS Referral Response Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1025639 - https://oval.cisecurity.org/repository/search/definition/oval%3Aor
rences: - http://www.securitytracker.com/id?1025639 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12640 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67727 - http://secunia.com/advisories/44894 - http://secunia.com/advisories/44948 - http://www.securityfocus.com/bid/48187
CVE ID: CVE-2011-1870 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:45:59.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP SrvWriteConsoleOutputString Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://
nal Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://www.securityfocus.com/bid/48605 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12889 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-056 - http://osvdb.org/73795
CVE ID: CVE-2011-1871 State: PUBLISHED Published: 2011-08-10T21:16:00 Last Updated: 2024-08-06T22:46:00.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12971 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-064 - http://www.us
e.oval%3Adef%3A12971 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-064 - http://www.us-cert.gov/cas/techalerts/TA11-221A.html
CVE ID: CVE-2011-1872 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:46:00.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service (host OS infinite loop) via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48179 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12650 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-047 - http://ww
mitre.oval%3Adef%3A12650 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-047 - http://www.securitytracker.com/id?1025644
CVE ID: CVE-2011-1873 State: PUBLISHED Published: 2011-06-16T20:21:00 Last Updated: 2024-08-06T22:46:00.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate pointers during the parsing of OpenType (aka OTF) fonts, which allows remote attackers to execute arbitrary code via a crafted font file, aka "Win32k OTF Validation Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-upda
bility." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-041 - http://www.securitytracker.com/id?1025638 - http://www.securityfocus.com/bid/48183 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12725 - http://secunia.com/advisories/44893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/67732
CVE ID: CVE-2011-1874 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2025-01-21T18:03:05.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12585 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761 - http://osvdb.org/73777 - http://www.securityfocus.com/bid/48587
CVE ID: CVE-2011-1875 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:45:59.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.o
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/73785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12704 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://www.securityfocus.com/bid/48589 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761
CVE ID: CVE-2011-1876 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:46:00.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.c
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12866 - http://www.securityfocus.com/bid/48590 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761 - http://osvdb.org/73778
CVE ID: CVE-2011-1877 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:46:00.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://osvdb.org/73779 - http://support.a
://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://osvdb.org/73779 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12847 - http://www.securitytracker.com/id?1025761 - http://www.securityfocus.com/bid/48591
CVE ID: CVE-2011-1878 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:45:59.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.o
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/73780 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://support.avaya.com/css/P8/documents/100144947 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12647 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761 - http://www.securityfocus.com/bid/48592
CVE ID: CVE-2011-1879 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:46:00.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.sec
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48593 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11946 - http://www.securitytracker.com/id?1025761 - http://osvdb.org/73781
CVE ID: CVE-2011-1880 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:45:59.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48597 - htt
rability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/48597 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://osvdb.org/73786 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12000 - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761
CVE ID: CVE-2011-1881 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-10-17T19:54:57.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.micros
rability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761 - http://www.securityfocus.com/bid/48599 - http://osvdb.org/73787 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12851
CVE ID: CVE-2011-1882 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:46:00.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.o
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/73782 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12738 - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761 - http://www.securityfocus.com/bid/48594
CVE ID: CVE-2011-1883 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:45:59.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.o
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/73783 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://support.avaya.com/css/P8/documents/100144947 - http://www.securityfocus.com/bid/48595 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12721 - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761
CVE ID: CVE-2011-1884 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:46:00.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.m
a "Win32k Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12873 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://osvdb.org/73784 - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761 - http://www.securityfocus.com/bid/48596
CVE ID: CVE-2011-1885 State: PUBLISHED Published: 2011-07-13T23:00:00 Last Updated: 2024-08-06T22:46:00.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other CVEs listed in MS11-054, aka "Win32k Null Pointer De-reference Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/73788 - http://www.security
rability." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/73788 - http://www.securityfocus.com/bid/48600 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11951 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-054 - http://support.avaya.com/css/P8/documents/100144947 - http://www.us-cert.gov/cas/techalerts/TA11-193A.html - http://secunia.com/advisories/45186 - http://www.securitytracker.com/id?1025761