Description
A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Windows 7 | Microsoft / Windows 7 | 32-bit Systems Service Pack 1 | affected |
| Windows 7 | Microsoft / Windows 7 | x64-based Systems Service Pack 1 | affected |
| Windows Server 2008 | Microsoft / Windows Server 2008 | 32-bit Systems Service Pack 2 | affected |
| Windows Server 2008 | Microsoft / Windows Server 2008 | 32-bit Systems Service Pack 2 (Server Core installation) | affected |
| Windows Server 2008 | Microsoft / Windows Server 2008 | Itanium-Based Systems Service Pack 2 | affected |
| Windows Server 2008 | Microsoft / Windows Server 2008 | x64-based Systems Service Pack 2 | affected |
| Windows Server 2008 | Microsoft / Windows Server 2008 | x64-based Systems Service Pack 2 (Server Core installation) | affected |
| Windows Server 2008 R2 | Microsoft / Windows Server 2008 R2 | Itanium-Based Systems Service Pack 1 | affected |
| Windows Server 2008 R2 | Microsoft / Windows Server 2008 R2 | x64-based Systems Service Pack 1 | affected |
| Windows Server 2008 R2 | Microsoft / Windows Server 2008 R2 | x64-based Systems Service Pack 1 (Server Core installation) | affected |