正文

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0090)本地特权提升漏洞

admin
admin V管理员 /0 评论 /7 阅读
0414
此篇文章发布距今已超过1127天，您需要注意文章的内容或图片是否可用！

CVE编号

CVE-2011-0090

利用情况

暂无

补丁情况

N/A

披露时间

2011-02-09
漏洞描述
Microsoft Windows是一款微软发行的操作系统。Windows内核模式驱动在校验由用户空间到内核空间的数据时存在错误，本地攻击者可以利用漏洞以内核上下文执行任意代码。
解决建议
用户可参考如下供应商提供的安全补丁修复此漏洞：Microsoft Windows Vista SP1Microsoft Windows6.0-KB2479628-x86.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=6FB7EBCC-2052 -457B-B5BC-1BBCB17696B9Microsoft Windows Server 2008 for Itanium-based Systems SP2Microsoft Windows6.0-KB2479628-ia64.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=D10EDA21-B3C3 -4D8E-8596-BC45E4165F933DM Software Disk Management Software SP2Microsoft WindowsServer2003-KB2479628-x86-ENU.exehttp://www.microsoft.com/downloads/details.aspx?familyid=54FE2669-8A63 -4D96-8B82-5B10F45B293EMicrosoft Windows 7 for x64-based Systems 0Microsoft Windows6.1-KB2479628-x64.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=B42642B3-FB78 -4700-BFE8-BFA997B90C16Microsoft Windows XP Media Center Edition SP3Microsoft WindowsXP-KB2479628-x86-ENU.exehttp://www.microsoft.com/downloads/details.aspx?familyid=56F4F43E-C313 -49DC-A278-E3E8A83A907EMicrosoft Windows Server 2003 Itanium SP2Microsoft WindowsServer2003-KB2479628-ia64-ENU.exehttp://www.microsoft.com/downloads/details.aspx?familyid=A09C3E6E-C55C -492A-B7AD-3E3D35711643Microsoft Windows Vista SP2Microsoft Windows6.0-KB2479628-x86.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=6FB7EBCC-2052 -457B-B5BC-1BBCB17696B9Microsoft Windows 7 for 32-bit Systems 0Microsoft Windows6.1-KB2479628-x86.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=078FE6C0-1B2C -4896-A345-25CC1B1105E2Microsoft Windows XP Home SP3Microsoft WindowsXP-KB2479628-x86-ENU.exehttp://www.microsoft.com/downloads/details.aspx?familyid=56F4F43E-C313 -49DC-A278-E3E8A83A907EMicrosoft Windows XP Professional x64 Edition SP2Microsoft WindowsServer2003.WindowsXP-KB2479628-x64-ENU.exehttp://www.microsoft.com/downloads/details.aspx?familyid=E80DB313-B470 -4D71-BC34-70BFBFB6579FMicrosoft Windows Server 2008 for Itanium-based Systems R2Microsoft Windows6.1-KB2479628-ia64.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=8C6BF720-F544 -4F58-9B1C-2399957EC43DMicrosoft Windows Vista x64 Edition SP2Microsoft Windows6.0-KB2479628-x64.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=88D68757-1AB0 -4585-9578-52A474B10882Microsoft Windows Server 2008 for Itanium-based Systems 0Microsoft Windows6.0-KB2479628-ia64.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=D10EDA21-B3C3 -4D8E-8596-BC45E4165F93Microsoft Windows Vista x64 Edition SP1Microsoft Windows6.0-KB2479628-x64.msuhttp://www.microsoft.com/downloads/details.aspx?familyid=88D68757-1AB0 -4585-9578-52A474B10882
参考链接
http://osvdb.org/70814
http://secunia.com/advisories/43255
http://www.securityfocus.com/bid/46150
http://www.vupen.com/english/advisories/2011/0325
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-012
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 microsoft windows_2003_server * -
运行在以下环境
系统 microsoft windows_7 * -
运行在以下环境
系统 microsoft windows_7 - -
运行在以下环境
系统 microsoft windows_server_2003 * -
运行在以下环境
系统 microsoft windows_server_2008 * -
运行在以下环境
系统 microsoft windows_server_2008 - -
运行在以下环境
系统 microsoft windows_vista * -
运行在以下环境
系统 microsoft windows_vista - -
运行在以下环境
系统 microsoft windows_xp * -
运行在以下环境
系统 microsoft windows_xp - -
CVSS3评分 7.2
  • 攻击路径 本地
  • 攻击复杂度 低
  • 权限要求 无
  • 影响范围 N/A
  • 用户交互 无
  • 可用性 完全地
  • 保密性 完全地
  • 完整性 完全地
AV:L/AC:L/Au:N/C:C/I:C/A:C CWE-ID 漏洞类型 CWE-20 输入验证不恰当