CVE-2009-1126

No fix known EPSS 1%

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."

Published 2009-06-10 · CVE record · OSV

Products: microsoft windows_2000, microsoft windows_server_2003, microsoft windows_server_2008, microsoft windows_vista, microsoft windows_xp