PT-2010-2246 · Microsoft · Windows Server 2008+7

Published 2010-06-08 · Updated 2025-01-21 · CVE-2010-0485

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 2000 SP4 through 2000 SP4 Microsoft Windows versions XP SP2 through XP SP3 Microsoft Windows versions Server 2003 SP2 Microsoft Windows versions Vista SP1 through Vista SP2 Microsoft Windows versions Server 2008 Gold through Server 2008 SP2 Microsoft Windows version 7 Microsoft Windows version Server 2008 R2

Description The Windows kernel-mode drivers in win32k.sys do not properly validate all callback parameters when creating a new window, allowing local users to execute arbitrary code. An elevation of privilege issue exists due to the improper validation of parameters when creating a new window, which could allow an attacker to run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows 2000 SP4, update to a version that includes the fix for this issue. For Microsoft Windows XP SP2 and SP3, update to a version that includes the fix for this issue. For Microsoft Windows Server 2003 SP2, update to a version that includes the fix for this issue. For Microsoft Windows Vista SP1 and SP2, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 Gold and SP2, update to a version that includes the fix for this issue. For Microsoft Windows 7, update to a version that includes the fix for this issue. For Microsoft Windows Server 2008 R2, update to a version that includes the fix for this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-0485

Affected Products

Windows

Windows 2000

Windows 7

Windows Server 2003

Windows Server 2008

Windows Server 2008 R2

Windows Vista

Windows Xp

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2010-0485 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0485 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6948 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-032 · Note
• http://opera.com/support/kb/view/954 · Note
• https://t.me/cvenotify/108076 · Telegram Post
• http://us-cert.gov/cas/techalerts/TA10-159B.html · Note