PT-2010-3516 · Microsoft · Windows+3

Matthieu Suiche · Publicado 2010-08-11 · Atualizado 2023-12-07 · CVE-2010-1893

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue is related to an integer overflow in the TCP/IP stack, allowing local users to gain privileges. It is also described as an elevation of privilege vulnerability in TCP/IP processing due to an error in processing a specific input buffer. This could allow an attacker to run arbitrary code with system-level privileges, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7, update to a version that includes the fix for the integer overflow in the TCP/IP stack. For other affected versions of Microsoft Windows, apply the necessary patch or update to resolve the elevation of privilege vulnerability in TCP/IP processing.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-1893

Produtos afetados

Windows

Windows 7

Windows Server 2008

Windows Vista

Referências · 6

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12087 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-058 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-058 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1893 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1893 · Nota de Segurança