search menu icon-carat-right cmu-wordmark

CERT Coordination Center

Microsoft Client Server Runtime System Vulnerability

Vulnerability Note VU#259197

Original Release Date: 2005-04-13 | Last Revised: 2005-05-17

Overview

The Microsoft Client Server Runtime System (CSRSS) incorrectly validates certain messages potentially resulting in privilege elevation.

Description

CSRSS is the user-mode part of the Win32 subsystem. Win32.sys is the kernel-mode portion of the Win32 subsystem. The Win32 subsystem must be running at all times. CSRSS is responsible for console windows, for creating threads, for deleting threads, and for some parts of the 16-bit virtual MS-DOS environment. The CSRSS only responds to requests made by other processes on the local computer.


A locally authenticated user may be able to exploit a vulnerability in the way CSRSS validates certain messages in order to gain elevated privileges.

Impact

Local authenticated users could potentially execute arbitrary code as privileged users, allowing them to gain complete control of the system.

Solution

Apply a patch

Microsoft has published Microsoft Security Bulletin MS05-018 in response to this issue. Users are strongly encouraged to review this advisory and apply the patches it refers to.

Vendor Information

259197
 
Affected   Unknown   Unaffected

Microsoft Corporation

Updated:  April 13, 2005

Status

  Vulnerable

Vendor Statement

For more information please see Microsoft bulletin MS05-018 available at: http://www.microsoft.com/technet/security/bulletin/MS05-018.mspx

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.


CVSS Metrics

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A

References

Acknowledgements

Thanks to Microsoft who in turn thank David Fritz working with iDEFENSE for reporting the CSRSS Vulnerability.

This document was written by Robert Mead based on information provided by Microsoft.

Other Information

CVE IDs: CVE-2005-0551
Severity Metric: 2.43
Date Public: 2005-04-12
Date First Published: 2005-04-13
Date Last Updated: 2005-05-17 14:10 UTC
Document Revision: 14

Sponsored by the Department of Homeland Security Office of Cybersecurity and Communications.