CVE-2011-1236 Use after free in n/a
Local attackers can gain privileges via a crafted application exploiting a use-after-free flaw in the Windows win32k.sys kernel driver.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-1236?
CVE-2011-1236 is a high-severity use after free vulnerability in Microsoft Windows 2003 Server, published on 13 Apr 2011. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that leverages incorrect driver object management, a different vulnerability than other "Vulnerability Type 1" CVEs listed in MS11-034, aka "Win32k Use After Free Vulnerability."
Which versions are affected by CVE-2011-1236?
It affects 6 products.
Products include Microsoft Windows 2003 Server, Microsoft Windows 7, Microsoft Windows Server 2003, Microsoft Windows Server 2008, Microsoft Windows Vista, Microsoft Windows Xp.
How do I fix CVE-2011-1236?
No fix has been published for CVE-2011-1236 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2011-1236 being exploited?
There is no known exploitation of CVE-2011-1236 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows 2003 Server
Sources
Also known as GHSA-wpx6-2rpm-7rx4.