CVE-2012-2529

Description

Integer overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka Windows Kernel Integer Overflow Vulnerability.

Risk Information

Base Score
6.2
MODERATE
Vector
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
1.174

Associated Vulnerability

VulnerabilityOS Platform
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows XP (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Server 2003 (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Vista (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Server 2008 (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows 7 (KB2724197) x86 based systemsWindows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows 7 (KB2724197) x86 based systems for SP1Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows XP x64 Edition (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Server 2003 x64 Edition (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Vista for x64-based Systems (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Server 2008 x64 Edition (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows 7 for x64-based Systems (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows 7 for x64-based Systems (KB2724197) for SP1Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Server 2008 R2 x64 Edition (KB2724197)Windows
ms12-068: vulnerability in windows kernel could allow elevation of privilege: october 9, 2012 for Windows Server 2008 R2 x64 Edition (KB2724197) for SP1Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-12596Security Update for Windows Server 2003 (KB2724197)
PATCH-12597Security Update for Windows Vista (KB2724197)
PATCH-12598Security Update for Windows Server 2008 (KB2724197)
PATCH-12599Security Update for Windows 7 (KB2724197)
PATCH-12600Security Update for Windows 7 (KB2724197)
PATCH-12601Security Update for Windows XP x64 Edition (KB2724197)
PATCH-12602Security Update for Windows Server 2003 x64 Edition (KB2724197)
PATCH-12603Security Update for Windows Vista for x64-based Systems (KB2724197)
PATCH-12604Security Update for Windows Server 2008 x64 Edition (KB2724197)
PATCH-12605Security Update for Windows 7 for x64-based Systems (KB2724197)
PATCH-12606Security Update for Windows 7 for x64-based Systems (KB2724197)
PATCH-12607Security Update for Windows Server 2008 R2 x64 Edition (KB2724197)
PATCH-12608Security Update for Windows Server 2008 R2 x64 Edition (KB2724197)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234