<< Back
CVE Number Vulnerability Product Severity Date
MS11-054 Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2555917) Windows XP Critical 13-07-2011

Technical Information

Brief overview of the risk:
This security update resolves 15 privately reported vulnerabilities in Microsoft Windows. The most severe of these vulnerabilities could allow elevation of privilege if an attacker logged on locally and ran a specially crafted application.
Detailed Information on the risk:

An elevation of privilege vulnerability exists due to the way that Windows kernel-mode drivers manage kernel-mode driver objects. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.


Further information on this exploit is available at : MS11-054

Affected Software

Windows XP Service Pack 3 
Windows XP Professional x64 Edition Service Pack 2 
Windows Server 2003 Service Pack 2 
Windows Server 2003 x64 Edition Service Pack 2 
Windows Server 2003 with SP2 for Itanium-based Systems 
Windows Vista Service Pack 1 and Windows Vista Service Pack 2 
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2 
Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2* 
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2* 
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2 
Windows 7 for 32-bit Systems and Windows 7 for 32-bit Systems Service Pack 1 
Windows 7 for x64-based Systems and Windows 7 for x64-based Systems Service Pack 1 
Windows Server 2008 R2 for x64-based Systems and Windows Server 2008 R2 for x64-based Systems Service Pack 1* 
Windows Server 2008 R2 for Itanium-based Systems and Windows Server 2008 R2 for Itanium-based Systems Service Pack 1