certfr_avis - certa-2012-avi-009

CERTA-2012-AVI-009

Vulnerability from certfr_avis

Une vulnérabilité dans le processus CSRSS (Windows Client/Server Run-time Subsystem) permet à une personne malintentionnée d'élever ses privilèges.

Description

Une vulnérabilité présente dans le processus CSRSS (Windows Client/Server Run-time Subsystem) permet à un attaquant d'élever ses privilèges s'il est capable de se connecter au système et d'exécuter une application spécialement conçue. L'attaquant pourrait alors prendre le contrôle total du système.

Cette vulnérabilité ne peut être exploitée que sur les systèmes dont les paramètres régionaux sont définis sur chinois, japonais ou coréen. Elle réside dans la façon dont le processus CSRSS traite une séquence de caractères Unicode.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Windows	Windows Vista Service Pack 2 ;
Microsoft	Windows	Windows XP Professionnel x64 Edition Service Pack 2 ;
Microsoft	Windows	Windows Server 2003 Service Pack 2 pour les systèmes Itanium ;
Microsoft	Windows	Windows Server 2003 Edition x64 Service Pack 2 ;
Microsoft	Windows	Windows Server 2008 Service Pack 2 pour systèmes Itanium.
Microsoft	Windows	Windows Server 2008 Service Pack 2 pour systèmes 64 bits ;
Microsoft	Windows	Windows XP Service Pack 3 ;
Microsoft	Windows	Windows Vista Edition x64 Service Pack 2 ;
Microsoft	Windows	Windows Server 2008 Service Pack 2 ;
Microsoft	Windows	Windows Server 2003 Service Pack 2 ;

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft MS12-003 du 10 janvier 2012

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows Vista Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows XP Professionnel x64 Edition Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2003 Service Pack 2 pour les syst\u00e8mes Itanium ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2003 Edition x64 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 Service Pack 2 pour syst\u00e8mes Itanium.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 Service Pack 2 pour syst\u00e8mes 64 bits ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows XP Service Pack 3 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Vista Edition x64 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2008 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows Server 2003 Service Pack 2 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 pr\u00e9sente dans le processus CSRSS (Windows\nClient/Server Run-time Subsystem) permet \u00e0 un attaquant d\u0027\u00e9lever ses\nprivil\u00e8ges s\u0027il est capable de se connecter au syst\u00e8me et d\u0027ex\u00e9cuter une\napplication sp\u00e9cialement con\u00e7ue. L\u0027attaquant pourrait alors prendre le\ncontr\u00f4le total du syst\u00e8me.\n\nCette vuln\u00e9rabilit\u00e9 ne peut \u00eatre exploit\u00e9e que sur les syst\u00e8mes dont les\nparam\u00e8tres r\u00e9gionaux sont d\u00e9finis sur chinois, japonais ou cor\u00e9en. Elle\nr\u00e9side dans la fa\u00e7on dont le processus CSRSS traite une s\u00e9quence de\ncaract\u00e8res Unicode.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2012-0005",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0005"
    }
  ],
  "initial_release_date": "2012-01-11T00:00:00",
  "last_revision_date": "2012-01-11T00:00:00",
  "links": [],
  "reference": "CERTA-2012-AVI-009",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2012-01-11T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans le processus CSRSS (\u003cspan class=\"textit\"\u003eWindows\nClient/Server Run-time Subsystem\u003c/span\u003e) permet \u00e0 une personne\nmalintentionn\u00e9e d\u0027\u00e9lever ses privil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le processus CSRSS de Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS12-003 du 10 janvier 2012",
      "url": "http://technet.microsoft.com/en-us/security/bulletin/MS12-003"
    }
  ]
}

CVE-2012-0005 (GCVE-0-2012-0005)

Vulnerability from cvelistv5

Published

2012-01-10 21:00

Modified

2024-08-06 18:09

Severity ?

CWE

Summary

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."

References

URL

Tags

	http://www.us-cert.gov/cas/techalerts/TA12-010A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1026495	vdb-entry, x_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14879	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/51270	vdb-entry, x_refsource_BID
	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-003	vendor-advisory, x_refsource_MS
	http://secunia.com/advisories/47479	third-party-advisory, x_refsource_SECUNIA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:09:17.083Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "TA12-010A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA12-010A.html"
          },
          {
            "name": "1026495",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1026495"
          },
          {
            "name": "oval:org.mitre.oval:def:14879",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14879"
          },
          {
            "name": "51270",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/51270"
          },
          {
            "name": "MS12-003",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-003"
          },
          {
            "name": "47479",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/47479"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2012-01-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka \"CSRSS Elevation of Privilege Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "TA12-010A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA12-010A.html"
        },
        {
          "name": "1026495",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1026495"
        },
        {
          "name": "oval:org.mitre.oval:def:14879",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14879"
        },
        {
          "name": "51270",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/51270"
        },
        {
          "name": "MS12-003",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-003"
        },
        {
          "name": "47479",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/47479"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2012-0005",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka \"CSRSS Elevation of Privilege Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "TA12-010A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA12-010A.html"
            },
            {
              "name": "1026495",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1026495"
            },
            {
              "name": "oval:org.mitre.oval:def:14879",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14879"
            },
            {
              "name": "51270",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/51270"
            },
            {
              "name": "MS12-003",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-003"
            },
            {
              "name": "47479",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/47479"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2012-0005",
    "datePublished": "2012-01-10T21:00:00",
    "dateReserved": "2011-11-09T00:00:00",
    "dateUpdated": "2024-08-06T18:09:17.083Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2012-AVI-009

Vulnerability from certfr_avis

Description

Solution

CVE-2012-0005 (GCVE-0-2012-0005)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature