PT-2010-3512 · Microsoft · Windows Kernel+3

Tavis Ormandy · Published 2010-08-11 · Updated 2025-01-21 · CVE-2010-1889

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2

Description The issue is related to object initialization during error handling, allowing local users to gain privileges via a crafted application. An elevation of privilege exists in the Windows Kernel due to the way the kernel initializes objects while handling certain errors. An attacker who successfully exploited this issue could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Windows Vista versions SP1 through SP2, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2008 versions Gold through SP2, update to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to the kernel to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-1889

Affected Products

Windows

Windows Kernel

Windows Server 2008

Windows Vista

References · 8

• 🔥 https://exploit-db.com/exploits/14667 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1889 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1889 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-047 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11044 · Note
• https://t.me/cvenotify/108078 · Telegram Post
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-047 · Note
• http://us-cert.gov/cas/techalerts/TA10-222A.html · Note