PT-2010-5182 · Microsoft · Windows Server 2008 R2+2

Stã©Fan Le Berre + 1 · Publicado 2010-12-16 · Atualizado 2018-10-30 · CVE-2010-3944

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Server 2008 R2 (affected versions not specified) Windows 7 (affected versions not specified)

Description The issue is related to improper validation of user-mode input by the Windows kernel-mode drivers, which can be exploited by a local user to gain privileges via a crafted application. This could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Windows Server 2008 R2, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Windows 7, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-3944

Produtos afetados

Windows

Windows 7

Windows Server 2008 R2

Referências · 8

• 🔥 https://exploit-db.com/exploits/15758 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12184 · Nota
• http://securitytracker.com/id?1024880 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3944 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-098 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-3944 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA10-348A.html · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-098 · Nota