CVE-2011-0089
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-0089
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, aka "Win32k Window Class Improper Pointer Validation Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows多个平台win32k窗口类错误指针验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows 是微软发布的非常流行的操作系统。 Microsoft Windows XP SP2和SP3，Windows Server 2003 SP2，Windows Vista SP1和SP2，Windows Server 2008 Gold，SP2中的kernel-mode驱动中的win32k.sys没有正确验证user-mode输入。本地用户可以借助特制应用程序获取特权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-0089
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-0089
Please Login to view more intelligence information
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-012vendor-advisoryx_refsource_MS
- https://nvd.nist.gov/vuln/detail/CVE-2011-0089
Same Patch Batch · n/a · 2011-02-09 · 15 CVEs total
| CVE-2011-0030 | Microsoft Windows多个平台CSRSS本地权限提升漏洞 | |
| CVE-2011-0031 | Microsoft Windows多个平台脚本引擎信息泄露漏洞 | |
| CVE-2011-0039 | Microsoft Windows多个平台LSASS长度验证漏洞 | |
| CVE-2011-0040 | Microsoft Active Directory服务器SPN输入验证漏洞 | |
| CVE-2011-0045 | Microsoft Windows XP内核整数截断本地权限提升漏洞 | |
| CVE-2011-0086 | Microsoft Windows多个平台win32k错误用户输入验证漏洞 | |
| CVE-2011-0087 | Microsoft Windows多个平台win32k不充足用户输入验证漏洞 | |
| CVE-2011-0088 | Microsoft Windows多个平台win32k窗口类指针混淆漏洞 | |
| CVE-2011-0090 | Microsoft Windows多个平台win32k内存破坏漏洞 | |
| CVE-2011-0277 | HP Power Manager跨站请求伪造漏洞 | |
| CVE-2011-0921 | HP Data Protector客户端Cell Manager Service crs.exe任意代码执行漏洞 | |
| CVE-2011-0922 | HP Data Protector客户端设计错误漏洞 | |
| CVE-2011-0923 | HP Data Protector客户端任意Perl代码执行漏洞 | |
| CVE-2011-0924 | HP Data Protector客户端任意脚本代码执行漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-8187
Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption - CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c - CVE-2026-6666
PgBouncer crash in kill_pool_logins_server_error - CVE-2026-6665
PgBouncer buffer overflow in SCRAM
V. Comments for CVE-2011-0089
No comments yet