← Vulnerability feed

Vulnerability record · CVE-2011-1229 · published 13 April 2011

CVE-2011-1229: Microsoft windows 2003 server null pointer dereference vulnerability

Microsoft · Windows 2003 Server

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."

7.2 CVSS 2.0 High EPSS 1.5% · top 27.3% CWE-476 · NULL pointer dereference
7.2CVSS 2.0 base score
1.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
35Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

35 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx Vendor Advisory
http://osvdb.org/71735 Broken Link
http://secunia.com/advisories/44156 Third Party Advisory
http://support.avaya.com/css/P8/documents/100133352 Third Party Advisory
http://www.securityfocus.com/bid/47229 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025345 Third Party AdvisoryVDB Entry
http://www.us-cert.gov/cas/techalerts/TA11-102A.html Third Party AdvisoryUS Government Resource
http://www.vupen.com/english/advisories/2011/0952 Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66411 VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12503 Third Party Advisory
http://blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx Vendor Advisory
http://osvdb.org/71735 Broken Link
http://secunia.com/advisories/44156 Third Party Advisory
http://support.avaya.com/css/P8/documents/100133352 Third Party Advisory
http://www.securityfocus.com/bid/47229 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025345 Third Party AdvisoryVDB Entry
http://www.us-cert.gov/cas/techalerts/TA11-102A.html Third Party AdvisoryUS Government Resource
http://www.vupen.com/english/advisories/2011/0952 Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66411 VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12503 Third Party Advisory

Track CVE-2011-1229 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.2CVE-2026-21525Windows Remote Access Connection Manager null pointer dereference DoSWindows Remote Access Connection Manager contains a null pointer dereference (CWE-476) that lets an unauthorized attacker deny service locally. The f…KEVEPSS 4.8%analysed

Source: NIST National Vulnerability Database (record CVE-2011-1229), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.