PT-2010-3374 · Microsoft · Windows

Publicado 2010-05-05 · Atualizado 2021-07-07 · CVE-2010-1734

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue allows local users to cause a denial of service, resulting in a system crash. This is achieved by passing a specific value, 0x18d, in the second argument, Msg, of a PostMessage function call for the DDEMLEvent window, leveraging the SfnINSTRING function in win32k.sys.

Recommendations For Microsoft Windows 2000, XP, and Server 2003, update to a version that includes the fix for this issue to prevent local users from causing a denial of service.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-1734

Produtos afetados

Windows

Referências · 6

• 🔥 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 · Exploit
• 🔥 https://exploit-db.com/exploits/12337 · Exploit
• 🔥 http://securityfocus.com/bid/39631 · Exploit
• http://securityfocus.com/archive/1/510886/100/0/threaded · Nota
• http://secunia.com/advisories/39456 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1734 · Nota de Segurança