oval:org.mitre.oval:def:266

Definition Id: oval:org.mitre.oval:def:266

Oval ID:	oval:org.mitre.oval:def:266
Title:	Windows XP (SP2) CSRSS Privilege Escalation Vulnerability
Description:	Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-0551	Version:	5
Platform(s):	Microsoft Windows XP	Product(s):	Client Server Runtime System (CSRSS)
Definition Synopsis:
Windows XP 32 bit Service Pack 2 Win2K/XP/2003/Vista/2008 Service Pack 2 is installed AND Windows XP 32-bit edition is installed Windows XP is installed AND 32-Bit version of Windows is installed AND The version of Ntoskrnl.exe is less than 5.1.2600.2622 AND NOT the patch KB890859 is installed (Hotfix key)