Product:
Windows
Summary
The kernel in Microsoft Windows 2000, XP, Server 2003, Vista, and Server 2008 does not properly validate changes to unspecified kernel objects. This vulnerability allows local users to gain elevated privileges through a crafted application, known as the Windows Kernel Desktop Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2009-1123 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. They can create a malicious application that manipulates kernel objects in a way that bypasses the validation checks. Once executed, this application can grant the attacker elevated privileges, allowing them to perform unauthorized actions on the system.
Affected Products
- Windows 2000 SP4: Affected by kernel validation issues.
- Windows XP SP2 and SP3: Vulnerable to privilege escalation through crafted applications.
- Windows Server 2003 SP2: Susceptible to exploitation via local access.
- Windows Vista Gold, SP1, and SP2: Contains the same kernel vulnerability.
- Windows Server 2008 SP2: Also affected by this kernel issue.
Mitigation
To mitigate this vulnerability, users should apply the updates provided by Microsoft as per their instructions. Keeping systems updated is crucial to protect against potential exploitation.