CVEvulnerability
CVE-2009-0083
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."
Affected configurations
• microsoft windows 2000
• microsoft windows server 2003
• microsoft windows server 2008
• microsoft windows vista
• microsoft windows vista gold
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/52524 osvdb.org
- http://secunia.com/advisories/34117 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm support.avaya.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid= support.nortel.com
- http://www.securityfocus.com/bid/34025 www.securityfocus.com
- http://www.securitytracker.com/id?1021827 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA09-069A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/0659 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440 oval.cisecurity.org
- http://osvdb.org/52524 osvdb.org
- http://secunia.com/advisories/34117 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm support.avaya.com
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid= support.nortel.com
- http://www.securityfocus.com/bid/34025 www.securityfocus.com
- http://www.securitytracker.com/id?1021827 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA09-069A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/0659 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440 oval.cisecurity.org