| Vulnerability Name: | CCN-22204 | ||||||
| Published: | 2005-09-05 | ||||||
| Updated: | 2005-09-05 | ||||||
| Summary: | Microsoft Windows could allow a local attacker to gain elevated privileges caused by a vulnerability in the keybd_event function or SendKeys command. A local attacker using the keybd_event function or SendKeys command and with access to the untrusted application could exploit this vulnerability by sending keystrokes to execute arbitrary code on the system with user privileges. This would allow the attacker to bypass security restrictions and gain elevated privileges on the system. | ||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||
| CVSS v2 Severity: | 4.6 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
| ||||||
| Vulnerability Consequences: | Gain Privileges | ||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List: Mon Sep 05 2005 - 06:09:23 CDT Microsoft Windows keybd_event validation vulnerability Source: CCN Type: BID-14743 Microsoft Windows Keyboard Event Privilege Escalation Weakness Source: XF Type: UNKNOWN windows-keybdevent-sendkey-gain-privilege(22204) | ||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
| BACK | |||||||