CVE-2009-0082

Description

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate handles, which allows local users to gain privileges via a crafted application that triggers unspecified actions, aka Windows Kernel Handle Validation Vulnerability.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.023

Associated Vulnerability

VulnerabilityOS Platform
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows 2000 (KB958690)Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows XP (KB958690) x86 based systemsWindows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows XP (KB958690) x86 based systems for SP3Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Server 2003 (KB958690) x86 based systemsWindows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Server 2003 (KB958690) x86 based systems for SP2Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Vista (KB958690) x86 based systemsWindows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Vista (KB958690) x86 based systems for SP1Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Server 2008 (KB958690)Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows XP x64 Edition (KB958690)Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Server 2003 x64 Edition (KB958690)Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Vista for x64-based Systems (KB958690)Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Vista for x64-based Systems (KB958690) for SP1Windows
ms09-006: vulnerabilities in windows kernel could allow remote code execution for Windows Server 2008 x64 Edition (KB958690)Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234