2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2012-0178" ,
"sourceIdentifier" : "secure@microsoft.com" ,
"published" : "2012-05-09T00:55:01.727" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T01:34:31.747" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka \"Plug and Play (PnP) Configuration Manager Vulnerability.\""
} ,
{
"lang" : "es" ,
"value" : "Condici\u00f3n de carrera en partmgr.sys en Windows Partition Manager en Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, y R2 SP1, y Windows 7 Gold y SP1 permite a usuarios locales obtener privilegios mediante una aplicaci\u00f3n dise\u00f1ada que realiza m\u00faltiples llamadas simultaneas Plug and Play (PnP) Configuration Manager, tambi\u00e9n conocido como \"Vulnerabilidad Plug and Play (PnP) Configuration Manager.\""
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.2 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "LOCAL" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "COMPLETE" ,
"integrityImpact" : "COMPLETE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 10.0 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-264"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:*:*:x64:*:*:*:*:*" ,
"matchCriteriaId" : "CE381783-027E-4B6D-B801-59873E5EA483"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:*:sp1:x64:*:*:*:*:*" ,
"matchCriteriaId" : "4FA15D65-7C32-4C7A-9915-746AB3F454EE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E33796DB-4523-4F04-B564-ADF030553D51"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*" ,
"matchCriteriaId" : "F282E5E8-A5C9-4092-B0BF-07A5A2CAA6F4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*" ,
"matchCriteriaId" : "D16A8D29-57BF-4B74-85F2-24DBD8B52BBF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:itanium:*:*:*:*:*" ,
"matchCriteriaId" : "7C684420-1614-4DAE-9BD9-F1FE9102A50F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" ,
"matchCriteriaId" : "FFF81F4B-7D92-4398-8658-84530FB8F518"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" ,
"matchCriteriaId" : "BA99C751-91CB-43D4-93FF-1C12342CAF1E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*" ,
"matchCriteriaId" : "95DC297F-06DB-4FB3-BFB6-7312C059E047"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:-:itanium:*:*:*:*:*" ,
"matchCriteriaId" : "0F376A61-CD03-460A-A97F-D1B47CF59744"
} ,
{
"vulnerable" : true ,
2023-12-07 19:00:41 +00:00
"criteria" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" ,
"matchCriteriaId" : "0A0D2704-C058-420B-B368-372D1129E914"
2023-04-24 12:24:31 +02:00
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F916C0D-3B99-46F3-A7AE-BAF067361499"
}
]
}
]
}
] ,
"references" : [
2023-12-07 19:00:41 +00:00
{
"url" : "http://osvdb.org/81735" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "http://secunia.com/advisories/49115" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.securityfocus.com/bid/53378" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "http://www.securitytracker.com/id?1027043" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "http://www.us-cert.gov/cas/techalerts/TA12-129A.html" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"US Government Resource"
]
} ,
{
"url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-033" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15229" ,
"source" : "secure@microsoft.com"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://osvdb.org/81735" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://secunia.com/advisories/49115" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/53378" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.securitytracker.com/id?1027043" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.us-cert.gov/cas/techalerts/TA12-129A.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"US Government Resource"
]
} ,
{
"url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-033" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15229" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
