PT-2010-3514 · Microsoft · Windows Server 2003+2

Published 2010-09-15 · Updated 2019-02-26 · CVE-2010-1891

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2

Description The issue is related to the improper allocation of memory for transactions in the Client/Server Runtime Subsystem (CSRSS) when a Chinese, Japanese, or Korean locale is enabled. This allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists due to the way the CSRSS assigns memory for specific user transactions, which could allow an attacker to run arbitrary code in the security context of the local system.

Recommendations For Microsoft Windows XP versions SP2 through SP3, update to a newer version that includes the fix for this issue. For Microsoft Windows Server 2003 version SP2, update to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to the CSRSS to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-1891

Affected Products

Windows Server 2003

Windows Xp

Windows

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-1891 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1891 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7536 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-069 · Note