CVE-2009-1126

Microsoft Windows 2000 SP4, XP SP2-SP3, Server 2003 SP2 - Privilege Escalation via Desktop Parameter Edit

Title source: llm
STIX 2.1

Description

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."

References (7)

Core 7
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35372
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6016
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/1544
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/54943
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022359
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA09-160A.html

Scores

EPSS 0.0144
EPSS Percentile 70.1%

Details

CWE
CWE-20
Status published
Products (6)
microsoft/windows_2000
microsoft/windows_server_2003
microsoft/windows_server_2008 (3 CPE variants)
microsoft/windows_server_2008 sp2 x32 (2 CPE variants)
microsoft/windows_vista (3 CPE variants)
microsoft/windows_xp (2 CPE variants)
Published Jun 10, 2009
Tracked Since Feb 18, 2026