CVE-2011-0673

CVE-2011-0673 describes a local privilege escalation vulnerability in the win32k.sys kernel-mode driver within Microsoft Windows XP SP3. An attacker can exploit this by crafting an application that triggers a NULL pointer dereference, leading to complete compromise of confidentiality, integrity, and availability. With a CVSS score of 7.2, this vulnerability is considered highly severe, requiring local access and low attack complexity. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community and media attention.