PT-2010-1852 · Microsoft · Windows 2000+4

Published 2010-01-22 · Updated 2023-12-07 · CVE-2010-0027

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 8 Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 and SP3 Microsoft Windows Server 2003 SP2

Description A remote code execution issue exists due to improper input validation in the URL validation functionality of Microsoft Internet Explorer and the ShellExecute API function in Windows. This allows remote attackers to execute arbitrary local programs via a crafted URL. An attacker who successfully exploits this issue could gain the same user rights as the logged-on user, potentially taking complete control of an affected system if the user has administrative rights.

Recommendations For Microsoft Internet Explorer versions 5.01 through 8, update to a version that properly validates input parameters to prevent remote code execution. For Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, ensure the ShellExecute API function is properly sanitized to prevent code execution vulnerabilities. As a temporary workaround, consider restricting access to the ShellExecute API function until a patch is available. Avoid using crafted URLs that could exploit the URL validation functionality in Internet Explorer until the issue is resolved.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2010-0027

ZDI-10-016

Affected Products

Internet Explorer

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 13

• 🔥 https://exploit-db.com/exploits/33552 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0027 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-007 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-10-016 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0027 · Security Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-007 · Note
• http://us-cert.gov/cas/techalerts/TA10-040A.html · Note
• http://zerodayinitiative.com/advisories/ZDI-10-016 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-002 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464 · Note
• http://securityfocus.com/archive/1/509470/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55773 · Note