Skip to content
OpenAdvisories
Unscored CVE-2011-0087 EUVD-2011-0113GHSA-3p8g-6946-c7f2

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2…

Published Feb 9, 2011 · Updated Aug 6, 2024 · Assigned by microsoft

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Insufficient User Input Validation Vulnerability."

References