CVE-2011-1236

HIGH Year: 2011
CVSS v3 Score
7.8
High
CVSS v2 Score
7.2
High
Weakness Type
CWE-399
View all →

Vulnerability Description

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."

Related Vulnerabilities

CVE-2010-1889

HIGH
CVSS:7.8(High)

Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to object...

CWE-3992010

CVE-2011-1874

HIGH
CVSS:7.8(High)

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2...

CWE-3992011

CVE-2016-10153

HIGH
CVSS:7.8(High)

The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory...

CWE-3992016

CVE-2016-3767

HIGH
CVSS:7.8(High)

The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28169363 and MediaTek internal bug...

CWE-3992016

CVE-2015-7400

HIGH
CVSS:7.7(High)

The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an XML external entity declaration in conjunction with an ...

CWE-3992015

CVE-2017-6609

HIGH
CVSS:7.7(High)

A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper parsing of malforme...

CWE-3992017