Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Windows WM_TIMER消息处理权限提升漏洞(MS02-071)
Vulnerability Description
Windows消息提供对用户事件的交互处理(如击键或鼠标移动)和与其他交互进程通信。WM_TIMER消息一般在某一计时器超时时发送，可以用来使进程执行计时回调函数。 WM_TIMER消息存在安全问题，本地或者利用终端服务访问攻击者可以利用这个漏洞使用WM_TIMER消息利用其他高权限进程执行回调函数，造成权限提升。 WM_TIMER的安全漏洞可以导致在交互桌面上的某一进程使用WM_TIME消息，触发另一进程在它选择的地址上执行回调函数，而且即使第二个进程没有设置任何计时器。如果第二个进程的权限高于第一个，
CVSS Information
N/A
Vulnerability Type
N/A