CVE-2011-0030

The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which…

published February 9, 2011

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka "CSRSS Elevation of Privilege Vulnerability," a different vulnerability than CVE-2010-0023.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01764 · 77.7th percentile
Published
2011-02-09T00:00Z
EPSS history
Timeline
  • 09 FEB 00:00Z
    The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which…
    cvelistv5