PT-2010-2246 · Microsoft · Windows Server 2008+7

CVE-2010-0485 · Publicado 2010-06-08 · Atualizado 2025-01-21

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4 through 2000 SP4 Microsoft Windows versions XP SP2 through XP SP3 Microsoft Windows versions Server 2003 SP2 Microsoft Windows versions Vista SP1 through Vista SP2 Microsoft Windows versions Server 2008 Gold through Server 2008 SP2 Microsoft Windows version 7 Microsoft Windows version Server 2008 R2

Description The Windows kernel-mode drivers in win32k.sys do not properly validate all callback parameters when creating a new window, allowing local users to execute arbitrary code. An elevation of privilege issue exists due to the improper validation of parameters when creating a new window, which could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows 2000 SP4, update to a version that includes the fix for this issue. For Microsoft Windows XP SP2 and SP3, update to a version that includes the fix for this issue. For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Vista SP1 and SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 Gold and SP2, update to a version that includes the fix for this issue. For Microsoft Windows 7, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2, update to a version that includes the fix for this issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-0485

Produtos afetados

Windows

Windows 2000

Windows 7

Windows Server 2003

Windows Server 2008

Windows Server 2008 R2

Windows Vista

Windows Xp

Referências · 8

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6948 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0485 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-032 · Nota
• http://opera.com/support/kb/view/954 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0485 · Nota de Segurança
• https://t.me/cvenotify/108076 · Publicação no Telegram
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA10-159B.html · Nota