CVE-2011-1281: Buffer Overflow
The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly restrict the number of console objects for a process, which allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that triggers an incorrect memory assignment for a user transaction, aka "CSRSS Local EOP AllocConsole Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1281?
CVE-2011-1281 has a severity rating of critical due to the potential for remote code execution.
How do I fix CVE-2011-1281?
To fix CVE-2011-1281, install the security updates provided by Microsoft as part of their patch management process.
What systems are affected by CVE-2011-1281?
CVE-2011-1281 affects various versions of Microsoft Windows including XP, Vista, Server 2003, and Server 2008.
Is CVE-2011-1281 still a concern for modern systems?
While CVE-2011-1281 primarily affects older Windows systems, it could still pose a risk if those systems are not updated or maintained.
How can I determine if my system is vulnerable to CVE-2011-1281?
You can determine vulnerability to CVE-2011-1281 by checking system updates and ensuring you have the latest security patches installed.