CVE-2011-0045

CVE-2011-0045 describes an integer truncation and buffer overflow vulnerability in the Trace Events functionality of the Microsoft Windows XP SP3 kernel, specifically within the WmiTraceMessageVa function. This flaw allows a local attacker to gain elevated privileges through a specially crafted application. With a CVSS score of 7.2, this vulnerability is considered high severity due to its local attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, a Proof-of-Concept exploit (EDB-16262) is publicly available, though there is no evidence of active exploitation or significant community discussion.