CVE-2011-0045
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly...
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
- Record
CVE-2011-0045- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
- Record
CVE-2011-0045- Updated
- 2026-11-02
EUVDEUVD-2011-0071 No score
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
- Record
EUVD-2011-0071- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-286r-q2r9-3cc4 No score
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly...
The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."
- Record
GHSA-286r-q2r9-3cc4- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows XP - WmiTraceMessageVa Integer Truncation (PoC) (MS11-011) | 2011-03-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0045 is a high vulnerability (CVSS 7.2) in Microsoft Windows Xp, published February 9, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.80%, the 90th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11996
securityfocus.com/bid/46136
securityreason.com/securityalert/8110
support.avaya.com/css/P8/documents/100127248
vupen.com/english/advisories/2011/0324
exchange.xforce.ibmcloud.com/vulnerabilities/64926