CERTA-2002-AVI-264
Vulnerability from certfr_avis

Une vulnérabilité dans le traitement des messages WM_TIMER permet de réaliser une élévation de privilèges.

Description

Les messages Windows sont un moyen de communication entre les processus interactifs et de réaction aux évènements utilisateur.

Un utilisateur local mal intentionné peut, en exploitant une vulnérabilité du traitement des messages WM_TIMER, élever ses privilèges.

Solution

Consulter le bulletin MS02-071 de Microsoft pour connaître la disponibilité des correctifs :

None
Impacted products
Vendor Product Description
Microsoft Windows Windows NT 4.0 ;
Microsoft Windows Windows XP.
Microsoft Windows Windows 2000 ;
References

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Windows NT 4.0 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows XP.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Windows 2000 ;",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nLes messages Windows sont un moyen de communication entre les processus\ninteractifs et de r\u00e9action aux \u00e9v\u00e8nements utilisateur.\n\nUn utilisateur local mal intentionn\u00e9 peut, en exploitant une\nvuln\u00e9rabilit\u00e9 du traitement des messages WM_TIMER, \u00e9lever ses\nprivil\u00e8ges.\n\n## Solution\n\nConsulter le bulletin MS02-071 de Microsoft pour conna\u00eetre la\ndisponibilit\u00e9 des correctifs :\n",
  "cves": [],
  "initial_release_date": "2002-12-13T00:00:00",
  "last_revision_date": "2002-12-13T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 MS02-071 de Microsoft :",
      "url": "http://www.microsoft.com/technet/security/bulletin/MS02-071.asp"
    }
  ],
  "reference": "CERTA-2002-AVI-264",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2002-12-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans le traitement des messages WM_TIMER permet de\nr\u00e9aliser une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le traitement des messages WM_TIMER sous Windows",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin MS02-071 de Microsoft",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…