PT-2010-5143 · Microsoft · Windows

Liam Omurchu · Publicado 2010-10-08 · Atualizado 2018-08-13 · CVE-2010-3889

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows (affected versions not specified)

Description The issue concerns an unspecified vulnerability in Microsoft Windows on 32-bit platforms, allowing local users to gain privileges via unknown vectors. It has been exploited in the wild, notably by the Stuxnet worm in July 2010. This was identified by both Microsoft researchers and other external researchers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2010-3889

Produtos afetados

Windows

Referências · 7

• http://securelist.com/en/blog/2291/Myrtus_and_Guava_Episode_MS10_061 · Nota
• http://computerworld.com/s/article/9185919/Is_Stuxnet_the_best_malware_ever_ · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3889 · Nota de Segurança
• http://virusbtn.com/conference/vb2010/abstracts/LastMinute8.xml · Nota
• http://symantec.com/connect/blogs/stuxnet-using-three-additional-zero-day-vulnerabilities · Nota
• http://eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100716-%281%29 · Nota
• http://virusbtn.com/conference/vb2010/abstracts/LastMinute7.xml · Nota