QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-1240

Back to search

CVE-2011-1240

Published: Apr 13, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

TA11-102A
third-party-advisory
x_refsource_CERT
MS11-034
vendor-advisory
x_refsource_MS
ADV-2011-0952
vdb-entry
x_refsource_VUPEN
47217
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:12547
vdb-entry
signature
x_refsource_OVAL
71755
vdb-entry
x_refsource_OSVDB
44156
third-party-advisory
x_refsource_SECUNIA
1025345
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now