VYPR
← All advisories
High severity7.1NVD Advisory· Published Oct 14, 2009· Updated Jun 16, 2026

CVE-2009-2516

CVE-2009-2516

Description

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly validate data sent from user mode, which allows local users to gain privileges via a crafted PE .exe file that triggers a NULL pointer dereference during chain traversal, aka "Windows Kernel NULL Pointer Dereference Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Microsoft/Windows 20002 versions
    cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
    • (no CPE)range: SP4
  • Microsoft/Windows Server 20032 versions
    cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
    • (no CPE)range: SP2
  • Microsoft/Windows Server 20084 versions
    cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
    • (no CPE)range: Gold
  • Microsoft/Windows4 versions
    cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
    • (no CPE)range: Gold, SP1
  • Microsoft/Windows Xp7 versions
    cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:professional:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:x64:*:*:*:*:*:*
    • (no CPE)range: SP2, SP3

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.