CVE-2009-0083

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-10 · updated 2026-06-16
Weakness: CWE-20

Description

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an application that triggers use of a crafted pointer, aka "Windows Kernel Invalid Pointer Vulnerability."

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows Server 2003: all versions
Microsoft Windows Server 2008: all versions
Microsoft Windows Vista: gold
Microsoft Windows XP Service Pack 3: all versions

References

http://osvdb.org/52524
http://secunia.com/advisories/34117
http://support.avaya.com/elmodocs2/security/ASA-2009-079.htm
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=842987&poid=
http://www.securityfocus.com/bid/34025
http://www.securitytracker.com/id?1021827
http://www.us-cert.gov/cas/techalerts/TA09-069A.html
http://www.vupen.com/english/advisories/2009/0659
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-006
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5440
http://osvdb.org/52524
http://secunia.com/advisories/34117

Get alerted when CVE-2009-0083 or the next vulnerability affects your stack