CVE-2011-0045

no score yetEPSS 3.8%

microsoft windows xp: no CVSS score yet. EPSS 3.8% chance of exploitation in the next 30 days.

The Trace Events functionality in the kernel in Microsoft Windows XP SP3 does not properly perform type conversion, which causes integer truncation and insufficient memory allocation and triggers a buffer overflow, which allows local users to gain privileges via a crafted application, related to WmiTraceMessageVa, aka "Windows Kernel Integer Truncation Vulnerability."

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2011-02-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_xp

References

http://osvdb.org/70823
http://securityreason.com/securityalert/8110
http://support.avaya.com/css/P8/documents/100127248
http://www.securityfocus.com/archive/1/516276/100/0/threaded
http://www.securityfocus.com/bid/46136

Check your stack JSON