PT-2010-4256 · Microsoft · Windows Server 2003+2

Sebastian Apelt · Publicado 2010-10-13 · Atualizado 2019-02-26 · CVE-2010-2740

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2

Description The issue arises from improper memory allocation during font parsing in the OpenType Font (OTF) format driver. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the improper parsing of specially crafted OpenType fonts, which could enable an attacker to run arbitrary code in kernel mode. This could lead to the installation of programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a version that properly allocates memory during font parsing to prevent privilege escalation. For Microsoft Windows Server 2003 version SP2, ensure that the OpenType Font format driver is updated to correctly parse OpenType fonts and prevent arbitrary code execution in kernel mode.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2740

Produtos afetados

Windows Server 2003

Windows Xp

Windows

Referências · 7

• http://us-cert.gov/cas/techalerts/TA10-285A.html · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7258 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2740 · Nota de Segurança
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-078 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2740 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-078 · Aviso do Fabricante
• http://support.avaya.com/css/P8/documents/100113218 · Nota