Unscored severity · published Feb 9, 2011
CVE-2011-0045
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory…
–
CVSS
3.8%
EPSS
No
On KEV
Description
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0045
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0045
osvdb.org
http://osvdb.org/70823
securityreason.com
http://securityreason.com/securityalert/8110
support.avaya.com
http://support.avaya.com/css/P8/documents/100127248
www.securityfocus.com
http://www.securityfocus.com/archive/1/516276/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/46136
www.securitytracker.com
http://www.securitytracker.com/id?1025046
More from Windows XP
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2013-3918
Microsoft Windows Out-of-Bounds Write Vulnerability
8.8
CVE-2011-3402
Microsoft Windows Remote Code Execution Vulnerability
8.8
CVE-2008-0015
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability