CVE-2002-2127: Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, whic...

Security readout for executives and security teams

CVE-2002-2127 affects Integrity Protection Driver (IPD) 1.2 and earlier. The driver tried to protect physical memory by blocking one device name, but a privileged local process could reach the same device through a symbolic link. This could undermine kernel-memory protections on systems still using the old driver. Exposure appears limited to legacy Windows systems that installed IPD 1.2 or earlier. The source bundle does not identify broader products, default platform exposure, or affected CPEs. Treat this as a legacy exposure cleanup item unless IPD protects critical systems. It is not shown as internet-exploitable, but it weakens kernel protection if an attacker already has privileged local code execution. Mitigation focus: Identify any systems running IPD 1.2 or earlier.; Review the NTBugtraq update notice for the newer IPD release.; Upgrade or remove legacy IPD where business use no longer exists..

Prepared

Jun 29, 2026, 17:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.