← Back

CVE-2011-1229

nvd nist
Published: Apr 13, 2011Modified: Apr 29, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."

Affected (45)

Microsoft
6 products
Windows 2003 Server
Windows 7
Windows Server 2003
Windows Server 2008
Windows Vista
Windows Xp
Avaya
29 products
Agent Access
Aura Conferencing Standard Edition
Basic Call Management System Reporting Desktop
Call Management Server Supervisor
Callpilot
Callvisor Asai Lan
Communication Server 1000 Telephony Manager
Computer Telephony
Contact Center Express
Customer Interaction Express
Enterprise Manager
Integrated Management
Interaction Center
Ip Agent
Ip Softphone
Meeting Exchange
Messaging Application Server
Network Reporting
Octelaccess Server
Octeldesigner
Operational Analyst
Outbound Contact Management
Speech Access
Unified Communication Center
Unified Messenger
Visual Messenger
Visual Vector Client
Vpnmanager Console
Web Messenger
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Windows 2003 Server
All versions
Microsoft
Windows 7
All versions
Windows 7
All versions
Windows Server 2003
All versions
Microsoft
Windows Server 2008
All versions
Windows Server 2008
All versions
Windows Server 2008
Version r2
Windows Server 2008
Version r2
Windows Server 2008
Version r2 sp1
Windows Server 2008
Version r2 sp1
Microsoft
Windows Vista
All versions
Windows Vista
All versions
Windows Vista
All versions
Windows Vista
All versions
Microsoft
Windows Xp
All versions
Windows Xp
All versions
Configuration B
29 vulnerable
Vulnerable SoftwareAffected Versions
Agent Access
All versions
Aura Conferencing Standard Edition
Version 6.0.0
Basic Call Management System Reporting Desktop
All versions
Call Management Server Supervisor
All versions
Callpilot
From 4.0.x to 5.0.x
Callvisor Asai Lan
All versions
Communication Server 1000 Telephony Manager
From 3.0.0 to 4.0.0
Computer Telephony
All versions
Contact Center Express
All versions
Customer Interaction Express
All versions
Enterprise Manager
All versions
Integrated Management
All versions
Interaction Center
All versions
Ip Agent
All versions
Ip Softphone
All versions
Meeting Exchange
From 5.0.0 to 5.2.0
Messaging Application Server
From 4.0.x to 5.2.x
Network Reporting
All versions
Octelaccess Server
All versions
Octeldesigner
All versions
Operational Analyst
All versions
Outbound Contact Management
All versions
Speech Access
All versions
Unified Communication Center
All versions
Unified Messenger
All versions
Visual Messenger
All versions
Visual Vector Client
All versions
Vpnmanager Console
All versions
Web Messenger
All versions

Related CWEs

CWE-476
NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

References (22)

Source: secure@microsoft.com
Vendor Advisory
Source: secure@microsoft.com
Broken Link
Source: secure@microsoft.com
Third Party Advisory
Source: secure@microsoft.com
Third Party Advisory
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Third Party AdvisoryUS Government Resource
Source: secure@microsoft.com
Broken Link
Source: secure@microsoft.com
PatchVendor Advisory
Source: secure@microsoft.com
VDB Entry
Source: secure@microsoft.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.