CVE-2019-1169
Description
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.
Risk Information
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Update Mozilla Firefox (67.0) fixes multiple vulnerabilites | Windows |
| Update Mozilla Firefox (x64) (67.0) fixes multiple vulnerabilites | Windows |
| Update Mozilla Firefox ESR (60.7.0) fixes multiple vulnerabilites | Windows |
| Update Mozilla Firefox ESR (x64) (60.7.0) fixes multiple vulnerabilites | Windows |
| Update Mozilla Thunderbird (60.7.0) fixes multiple vulnerabilites | Windows |
| Win32k Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4512486) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4512486) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB4512486) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB4512491) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB4512491) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows Server 2008 for x64-based Systems (KB4512476) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows Server 2008 for x86-based Systems (KB4512476) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows Server 2008 R2 for x64-based Systems (KB4512506) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows 7 for x86-based Systems (KB4512506) | Windows |
| Windows ALPC Elevation of Privilege Vulnerability for Windows 7 for x64-based Systems (KB4512506) | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-309861 | Mozilla Firefox (67.0) |
| PATCH-309862 | Mozilla Firefox (x64) (67.0) |
| PATCH-309865 | Mozilla Firefox ESR (60.7.0) |
| PATCH-309867 | Mozilla Firefox ESR (x64) (60.7.0) |
| PATCH-309864 | Mozilla Thunderbird (60.7.0) |
| PATCH-27195 | 2019-08 Security Only Quality Update for Windows 7 for x64-based Systems (KB4512486) |
| PATCH-27196 | 2019-08 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4512486) |
| PATCH-27197 | 2019-08 Security Only Quality Update for Windows 7 for x86-based Systems (KB4512486) |
| PATCH-27201 | 2019-08 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4512491) |
| PATCH-27202 | 2019-08 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4512491) |
| PATCH-27238 | 2019-08 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB4512476) |
| PATCH-27239 | 2019-08 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB4512476) |
| PATCH-27232 | 2019-08 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4512506) |
| PATCH-27233 | 2019-08 Security Monthly Quality Rollup for Windows 7 for x86-based Systems (KB4512506) |
| PATCH-27234 | 2019-08 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB4512506) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234