PT-2010-2037 · Microsoft · Windows 2000+2

Gynvael Coldwind + 2 · Published 2010-04-14 · Updated 2018-10-12 · CVE-2010-0237

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2000 SP4 Microsoft Windows XP SP2 Microsoft Windows XP SP3

Description An elevation of privilege issue exists due to improper restriction of symbolic link creation between untrusted and trusted registry hives. This could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows 2000 SP4, update to a version that includes the fix for this issue. For Microsoft Windows XP SP2, update to a version that includes the fix for this issue. For Microsoft Windows XP SP3, update to a version that includes the fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0237

Affected Products

Windows

Windows 2000

Windows Xp

References · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0237 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0237 · Security Note
• http://securitytracker.com/id?1023850 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-021 · Note
• http://secunia.com/advisories/39373 · Note
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7130 · Note