CVE-2012-0178

CWE-2643 documents3 sources

Severity

7.2HIGH

EPSS

0.5%

top 34.96%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Windows Server 2008 Microsoft Windows Vista

Timeline

PublishedMay 9

Latest updateMay 4

Description

Race condition in partmgr.sys in Windows Partition Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that makes multiple simultaneous Plug and Play (PnP) Configuration Manager function calls, aka "Plug and Play (PnP) Configuration Manager Vulnerability."

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/windows_vistasp2

▶NVDmicrosoft/windowsr2

🔴Vulnerability Details

GHSA

GHSA-qw86-xx8q-rx6f: Race condition in partmgr↗2022-05-04

▶

CVEList

CVE-2012-0178: Race condition in partmgr↗2012-05-09

▶