PT-2010-2538 · Microsoft · Windows Server 2008+2

Tavis Ormandy · Published 2010-04-14 · Updated 2023-12-07 · CVE-2010-0810

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista versions Gold, SP1, and SP2 Microsoft Windows Server 2008 versions Gold and SP2

Description A denial of service issue exists due to improper handling of exceptions by the kernel. This allows local users to cause a system reboot via a crafted application. An attacker could exploit this by running a specially crafted application, causing the system to become unresponsive and automatically restart.

Recommendations For Microsoft Windows Vista versions Gold, SP1, and SP2, apply the recommended patch to fix the kernel exception handler. For Microsoft Windows Server 2008 versions Gold and SP2, apply the recommended patch to fix the kernel exception handler. As a temporary workaround, consider restricting the execution of specially crafted applications to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-0810

Affected Products

Windows

Windows Server 2008

Windows Vista

References · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0810 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0810 · Security Note
• http://securitytracker.com/id?1023850 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-021 · Note
• http://secunia.com/advisories/39373 · Note
• http://us-cert.gov/cas/techalerts/TA10-103A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7012 · Note