CVE-2011-1229
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
- Record
CVE-2011-1229- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
- Record
CVE-2011-1229- Updated
- 2026-11-02
EUVDEUVD-2011-1237 No score
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
- Record
EUVD-2011-1237- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pxr2-xwwm-f7f3 No score
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003...
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."
- Record
GHSA-pxr2-xwwm-f7f3- Weakness
- CWE-476
- Updated
- 2026-11-02
Affected products
- microsoft windows 7
- microsoft windows server 2003
- microsoft windows server 2008
- microsoft windows vista
- microsoft windows xp
- microsoft windows 2003 server
- avaya agent access
- avaya aura conferencing standard edition
- avaya basic call management system reporting desktop
- avaya call management server supervisor
- avaya callpilot
- avaya callvisor asai lan
Show 23 moreShow less
- avaya communication server 1000 telephony manager
- avaya computer telephony
- avaya contact center express
- avaya customer interaction express
- avaya enterprise manager
- avaya integrated management
- avaya interaction center
- avaya ip agent
- avaya ip softphone
- avaya meeting exchange
- avaya messaging application server
- avaya network reporting
- avaya octelaccess server
- avaya octeldesigner
- avaya operational analyst
- avaya outbound contact management
- avaya speech access
- avaya unified communication center
- avaya unified messenger
- avaya visual messenger
- avaya visual vector client
- avaya vpnmanager console
- avaya web messenger
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1229 is a high vulnerability (CVSS 7.2) in Microsoft Windows 7, published April 13, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. No source names a fixed version.
References
securityfocus.com/bid/47229
us-cert.gov/cas/techalerts/TA11-102A.html
exchange.xforce.ibmcloud.com/vulnerabilities/66411
docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-034
vupen.com/english/advisories/2011/0952
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12503
Show 7 moreShow less
support.avaya.com/css/P8/documents/100133352
secunia.com/advisories/44156
blogs.technet.com/b/srd/archive/2011/04/12/ms11-034-addressing-vulnerabilities-in-the-win32k-subsystem.aspx
securitytracker.com/id?1025345
osvdb.org/71735
nvd.nist.gov/vuln/detail/CVE-2011-1229
github.com/advisories/GHSA-pxr2-xwwm-f7f3