CVE-2009-0080: Medium severity Microsoft Windows Server 2008 vulnerability

Published Apr 15, 2009

Updated

The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privileges by leveraging incorrect thread ACLs to access the resources of one of the processes, aka "Windows Thread Pool ACL Weakness Vulnerability."

Affected Software

5 affected components

Microsoft Windows Server 2008

Microsoft Windows Vista

Microsoft Windows Vista=sp1

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-012

Event History

Apr 15, 2009

CVE Published

via MITRE·03:49 AM

Data Sourced

via MITRE·03:49 AM

Description

Frequently Asked Questions

What is the severity of CVE-2009-0080?

CVE-2009-0080 is classified as a privilege escalation vulnerability.

How do I fix CVE-2009-0080?

To fix CVE-2009-0080, you should apply the latest security updates from Microsoft for Windows Vista and Server 2008.

Who is affected by CVE-2009-0080?

CVE-2009-0080 affects local users running processes under the NetworkService and LocalService accounts in Windows Vista and Server 2008.

What could happen if CVE-2009-0080 is exploited?

If exploited, CVE-2009-0080 allows local users to gain elevated privileges on the affected systems.

When was CVE-2009-0080 disclosed?

CVE-2009-0080 was disclosed in 2009.