CVE-2011-1229: Avaya Agent Access

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, a different vulnerability than other "Vulnerability Type 2" CVEs listed in MS11-034, aka "Win32k Null Pointer De-reference Vulnerability."

Affected products

• Avaya Agent Access: any version
• Avaya Aura Conferencing Standard Edition: version 6.0.0 only
• Avaya Basic Call Management System Reporting Desktop: any version
• Avaya Call Management Server Supervisor: any version
• Avaya Callpilot: from 4.0.x, up to and including 5.0.x
• Avaya Callvisor Asai Lan: any version
• Avaya Communication Server 1000 Telephony Manager: from 3.0.0, up to and including 4.0.0
• Avaya Computer Telephony: any version
• Avaya Contact Center Express: any version
• Avaya Customer Interaction Express: any version
• Avaya Enterprise Manager: any version
• Avaya Integrated Management: any version
• Avaya Interaction Center: any version
• Avaya IP Agent: any version
• Avaya IP Softphone: any version
• Avaya Meeting Exchange: from 5.0.0, up to and including 5.2.0
• Avaya Messaging Application Server: from 4.0.x, up to and including 5.2.x
• Avaya Network Reporting: any version
• Avaya Octelaccess Server: any version
• Avaya Octeldesigner: any version
• Avaya Operational Analyst: any version
• Avaya Outbound Contact Management: any version
• Avaya Speech Access: any version
• Avaya Unified Communication Center: any version
• Avaya Unified Messenger: any version
• and 10 more

Published 2011-04-13. Last modified 2026-06-16.