Vulnerability in Microsoft Windows 2003 Server
CVE-2011-0030
The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.
EPSS: 0.018 (75.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2003_server
- Microsoft Windows_xp
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_XF)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)