PT-2010-2243 · Microsoft · Windows 7+2

Martin Tofall · Publicado 2010-04-14 · Atualizado 2018-10-30 · CVE-2010-0482

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows Server 2008 R2 (affected versions not specified) Windows 7 (affected versions not specified)

Description A denial of service issue exists due to the improper validation of specially crafted image files. This allows an attacker to cause the system to become unresponsive and automatically restart by running a specially crafted application.

Recommendations For Windows Server 2008 R2, at the moment, there is no information about a newer version that contains a fix for this issue. For Windows 7, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-0482

Produtos afetados

Windows

Windows 7

Windows Server 2008 R2

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2010-0482 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 · Aviso do Fabricante
• http://securitytracker.com/id?1023850 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-021 · Nota
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Nota
• http://secunia.com/advisories/39374 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7176 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0482 · Nota de Segurança