Vulnerability Details : CVE-2009-1123
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability."
Products affected by CVE-2009-1123
- cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:-:*:*:*
- cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
CVE-2009-1123 is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:
Microsoft Windows Improper Input Validation Vulnerability
CISA required action:
Apply updates per vendor instructions.
CISA description:
The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.
Notes:
https://nvd.nist.gov/vuln/detail/CVE-2009-1123
Added on
2022-03-03
Action due date
2022-03-24
Exploit prediction scoring system (EPSS) score for CVE-2009-1123
28.47%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 97 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-1123
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST | |
|
7.8
|
HIGH | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST | 2024-07-16 |
References for CVE-2009-1123
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6206
404 Not FoundBroken Link
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-025
Microsoft Security Bulletin MS09-025 - Important | Microsoft LearnPatch;Vendor Advisory
-
http://osvdb.org/54940
Broken Link
-
http://www.us-cert.gov/cas/techalerts/TA09-160A.html
Page Not Found | CISABroken Link;Third Party Advisory;US Government Resource
-
http://www.securitytracker.com/id?1022359
Broken Link;Third Party Advisory;VDB Entry
-
http://www.vupen.com/english/advisories/2009/1544
Webmail: access your OVH emails on ovhcloud.com | OVHcloudBroken Link
-
http://secunia.com/advisories/35372
About Secunia Research | FlexeraBroken Link
Jump to