CVE-2012-0005

State: Published
Severity: Not scored
Published: Jan 10, 2012
Updated: Aug 6, 2024
Reserved: Nov 9, 2011

Description

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2, when a Chinese, Japanese, or Korean system locale is used, can access uninitialized memory during the processing of Unicode characters, which allows local users to gain privileges via a crafted application, aka "CSRSS Elevation of Privilege Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

TA12-010Athird-party-advisory
1026495vdb-entry
oval:org.mitre.oval:def:14879vdb-entrysignature
51270vdb-entry
MS12-003vendor-advisory
47479third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.