CVE-2011-1870: Integer overflow in the Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Wi...

Security readout for executives and security teams

This is a local Windows privilege-escalation and denial-of-service flaw in CSRSS on legacy Windows XP and Windows Server 2003 systems. It matters mainly where those unsupported platforms still exist, because a user able to run a crafted application could gain higher privileges or crash affected functionality. Exposure is limited to Microsoft Windows XP SP2/SP3 and Windows Server 2003 SP2 systems. Modern environments should mainly look for forgotten legacy hosts, embedded systems, lab systems, or isolated business applications that still depend on these operating systems. Prioritize this if any affected legacy Windows systems remain in production or connected to sensitive networks. The issue is old and local, but privilege escalation on unsupported operating systems can materially worsen any initial compromise. Mitigation focus: Apply Microsoft guidance and updates from MS11-056 where still applicable.; Remove or replace Windows XP and Windows Server 2003 systems wherever possible.; Restrict interactive and application execution access on any remaining affected hosts..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.