Vulnerability

CERT-In Vulnerability Note CIVN-2012-0102
Microsoft Windows Kernel win32k.sys Driver Integer Overflow Vulnerability

Original Issue Date:October 10, 2012

Severity Rating: MEDIUM

Systems Affected

Windows XP SP3 and prior
Windows XP Professional x64 Edition SP2 and prior
Windows Server 2003 SP2 and prior
Windows Server 2003 x64 Edition SP2 and prior
Windows Server 2003 for Itanium-based Systems SP2 and prior
Windows Vista SP2 and prior
Windows Vista x64 Edition SP2 and prior
Windows Server 2008 for 32-bit Systems SP2 and prior
Windows Server 2008 for x64-based Systems SP2 and prior
Windows Server 2008 for Itanium-based Systems SP2 and prior
Windows 7 for 32-bit Systems SP1 and prior
Windows 7 for x64-based Systems SP1 and prior
Windows Server 2008 R2 for x64-based Systems SP1 and prior
Windows Server 2008 R2 for Itanium-based Systems SP1 and prior

Overview

A privilege escalation vulnerability has been reported in Microsoft Windows Kernel, which could be exploited by local attackers to execute an arbitrary code on the system with the privileges of the kernel and take complete control of the affected system

Description

kernel memory by the Windows win32k.sys kernel mode driver on a vulnerable system

A local attacker could exploit the vulnerability by running a crafted program that is designed to send malicious requests to an affected system.

Successful exploitation of this vulnerability could allow an attacker to execute an arbitrary code with the privileges of the kernel and take complete control of an affected system.

Solution

Apply appropriate updates as mentioned in the Microsoft Security Bulletin MS12-068

Vendor Information

Microsoft
http://technet.microsoft.com/en-us/security/bulletin/MS12-068

References

Securityfocus
http://www.securityfocus.com/bid/55793

Cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=27088

Securelist
http://www.securelist.com/en/advisories/50862

CVE Name
CVE-2012-2529

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India