CVE-2009-1126: Input Validation
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1126?
CVE-2009-1126 is considered a critical vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2009-1126?
To fix CVE-2009-1126, it is recommended to apply the latest security updates provided by Microsoft for affected Windows versions.
Which versions of Windows are affected by CVE-2009-1126?
CVE-2009-1126 affects Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2.
What types of attacks can exploit CVE-2009-1126?
CVE-2009-1126 can be exploited by local users executing a crafted application to gain unauthorized privileges.
Is there a workaround for CVE-2009-1126?
There are no known effective workarounds for CVE-2009-1126, making prompt patching essential.